Internal Audit

Internal Audit Services

The service provides a wide range of complementary assurance services under one umbrella, which enables us to draw on a variety of specialist skills to meet customer requirements.

We have an established and growing reputation across the local government sector as experts in the application of risk-based audit methodologies and complimentary disciplines.  

We have experienced and qualified staff able to meet all internal audit needs in the following areas:

  • Risk-based audits
  • Systems audits
  • Programme and project governance audits
  • Regularity and compliance audit
  • Grant certification and independent examinations
  • Contract audit
  • Consultative support in the design of controls, risk management and governance processes

Our team provides a wide range of assurance and consultancy services to external organisations around the region and beyond, as well as council’s services.

Although the unit is organised around functional and client groupings, we adopt a flexible approach to staffing and placements. This ensures that skills and competencies are matched to client needs and also offers greater personal development opportunities for our staff.

Contact: David Smith – Strategic Internal Audit Manager and Deputy Head of Internal Audit, contact via email or Microsoft Teams

Technical Audit Services

Salford Technical Audit (STA) services  have been providing technical audit and consultancy services since 2003. Initially set up to provide support Greater Manchester Council and Greater Manchester Police, the service has expanded year on year including clients in the Merseyside and Lancashire, Cheshire, West and South Yorkshire and North Wales regions.

We support more than 40 partners’ internal teams, predominantly, through completion of the technological portion of their audit plans. This requires in depth technical skills, knowledge and understanding. Our partners, in the main, are local authorities, but we also provide services to combined authorities, housing, police and transport sector.

Every member of the STA Team is professionally qualified and has a minimum of ten years IT audit experience. Our staff also have a vast array of certifications, skills and knowledge covering all areas of IT. Some of the typical assurance services that we offer are listed below:

  • Cyber Security (NCSC CAF Assessment, NIST, ISO27001, 10 steps, Cyber Essentials, health checks)
  • Vulnerability and Patch Management (Including internal an external scans)
  • PCI DSS (SAQ assessment, health check, internal and external scans)
  • 3rd Party Supplier Management (Access Control, Site Security Assessment)
  • IT (Data Centre/Server room et al) Physical Security and Environmental Controls
  • Key Application Management
  • Project/Programme Management
  • Service Continuity and Disaster Recovery
  • Cloud Services Management (Hosted, SAAS, Access control, due diligence)
  • Service Management, for example:
    • Incident Management
    • Service Desk Management
    • Availability, Capacity and Performance Management
    • Request and Problem Management
    • Change Management
  • Access Control Management (Network, Application)
  • Mobile Device Management
  • Asset Management (Hardware, Software, License)
  • Information Governance / Management (Policies, data lifecycle management)

We also provide consultancy services in the following areas:

  • Cyber Services - Training and Awareness, Phishing Tests, gap analysis (to any of the standards listed above)
  • Data Analysis
  • Vulnerability scanning
  • IT health Check
  • Audit Needs Assessments
  • IT Investigative support
  • Schools IT/Cyber Security
  • Third party security assessments

Contact: Gary Marland – Head of Technical Audit, contact via email or Microsoft Teams

Corporate Counter Fraud Unit  

Our joint team with Warrington Borough Council also acts as the central focus for calls received via the council's counter fraud / whistleblowing hotline and undertake investigations of areas of concern including fraud and irregularities relating to the council services or conduct of staff.

Any concerns can be made confidentially by telephone to 0808 100 1235, report fraud online or email:

Internal Audit
Salford Civic Centre
Chorley Road
M27 5AW

This page was last updated on 24 October 2022

Rate this page