About the Internal Audit Report
From the Transparency Code for Smaller Authorities :
Smaller authorities should publish their annual internal audit report according to the format included in the Annual Return form. Publication of the relevant page of the completed Annual Return form will meet this requirement. The internal audit report should be signed by the person who carried out the internal audit.
Where the internal audit report contains any negative response to the internal controls objectives, these should be explained fully, including how any weaknesses will be addressed. As referred to paragraphs 7 and 8, when publishing this information smaller authorities should consider whether the Data Protection Act 1998 imposes any restrictions or constraints on such publication and whether any of the information would fall within an exemption under the Freedom of Information Act 2000 and therefore could, or should, be withheld from publication.
Where the response to any internal controls objectives is ‘not covered’, an explanation of when the most recent internal audit work was completed in this area and when it is next planned should be provided. If coverage is not required, an explanation stating why coverage is not needed should be provided.