Internal Audit

distinct from Auditor General's Office; No public work plan/reports link found on landing page; no current plan located.; corporate-plan-chapter (no dedicated Internal Audit budget note found)

Current this library's internal records: City of Toronto Corporate Strategic Plan (2019)

Completeness

• Document shelf: 2 rows (1 archived · 0 staged · 0 pending · 1 missing)
• Backgrounder: on file
• Strategy-evolution brief: on file
• Custody audit: not yet custody-audited
• Last verified: 2026-08-04 · this org has NOT had a full discovery-verification pass (our discovery-verification log)

Endpoints

• Website
• Open data: checked — none found
• API: checked — none found
• RSS: checked — none found
• Newsroom: checked — none found
• FOI / access requests: checked — none found

Document shelf (2 rows)

Backgrounder

Source: this library's internal records — a mechanical research draft, not independently reviewed for publication; reproduced as-is.

Internal Audit (City of Toronto) - backgrounder

Backgrounder / 2026-08-04 / registry row: tor-internal-audit (this library's government-document registry) / lens file for this org's series briefs

Mandate & statutory basis

Internal Audit has no own enabling statute; it is an administrative division of the City of Toronto operating under Council-delegated authority via the City of Toronto Act, 2006, S.O. 2006, c. 11, Sched. A, ss.6(1) and 7 (citation per corpus precedent, our research file for that body; ⚠️ still being checked not independently re-confirmed this review). Its mission, per its own webpage, is to "assist senior management in meeting their responsibilities for maintaining proper internal controls" (https://www.toronto.ca/city-government/accountability-operations-customer-service/city-administration/staff-directory-divisions-and-customer-service/internal-audit/, fetched).

Roles, responsibilities & scope

Internal Audit conducts audits of programs and business processes, fraud investigations, responds to audit requests from divisions, and advises management on new program design (https://www.toronto.ca/.../internal-audit/, fetched). This is explicitly a management-facing, executive-branch internal-controls function — distinct from the Auditor General's Office (tor-auditor-general-s-office), which is a statutory, Council-reporting accountability officer under City of Toronto Act, 2006 Part V (our research file for that body). The Auditor General's own stated duties note referrals flow "to divisional management/Internal Audit" (https://www.torontoauditor.ca/about/our-duties/, per our research file for that body), confirming the two offices are organizationally separate with a defined referral relationship rather than a reporting one.

Registry-completeness finding (new this review): although this org's own registry row carries archive_status: missing (no dedicated Internal Audit budget note located as of the 2026-08-04 registry audit), Internal Audit is in fact named as a distinct, budgeted "Service" within the Office of the CFO and Treasurer's own FY2026 Program Summary book — the archived source for sibling org tor-finance-treasury-services (sha256-12 26c5d96ad4c7): "Internal Audit / Who We Serve: Council, City divisions, agencies and corporations / What We Deliver: Business and risk consulting on policies, processes and information systems; assurance services including the performance of compliance, operational, financial, forensic and internal control reviews." This confirms Internal Audit sits organizationally within the CFO & Treasurer's budget structure at least for FY2026 reporting purposes, alongside (but distinct from) the registry's own parent_org assignment of tor-deputy-city-manager-corporate-services — the two are not necessarily in conflict (a Deputy City Manager portfolio can house a CFO-led budget program), but this review could not resolve which is the more precise day-to-day reporting line. See the org's own STRATEGY_EVOLUTION brief for the cited budget figures.

Governance & reporting line

The division reports to the Chief Financial Officer regarding the adequacy and effectiveness of City processes and improvement recommendations, and informs the Enterprise Risk Assurance Committee of its annual work plan and current activities (https://www.toronto.ca/.../internal-audit/, fetched). The only named staff member on the division's own webpage is Director Stuart Campbell (titled officeholder, cited institutionally). This CFO reporting line is consistent with the registry-completeness finding above (Internal Audit budgeted as a Service under the Office of the CFO and Treasurer).

Budget scale

FY2026 approved figures, read directly from the Office of the CFO and Treasurer Program Summary book (sha256-12 26c5d96ad4c7, archived under sibling org tor-finance-treasury-services): Internal Audit gross operating budget $3.112 million, net (after $255.8K revenue) $2.856 million; the FY2026 performance target is 80% of the Internal Audit workplan's engagements covering key risks (same source). This is the only budget figure available for this org and comes from a cross-referenced sibling document rather than a document registered under this org's own document id series — see Residuals & gaps in the brief.

Institutional history

⚠️ not yet confirmed against an original source. No founding date or prior-structure history for Internal Audit specifically was located this review. The registry notes the division's strategy_current_url points to the City's 2019 Corporate Strategic Plan (a corporate-wide document, not an Internal Audit-specific plan); no dedicated Internal Audit work-plan or annual-report document was located as this division's own series (registry row tor-internal-audit, notes field).

Strategy evolution brief

Source: this library's internal records — a mechanical research draft, not independently reviewed for publication; reproduced as-is.

Internal Audit (City of Toronto) - strategy evolution

2026-08-04 / registry: tor-internal-audit / grounded in archived copies (cited document id + sha256) / read through our research file for that body

TL;DR: This org's own registry row carries archive_status: missing and this review's own fresh extraction attempt confirms zero documents registered under its own registry id — but this is not a true zero-usable-docs case: a sibling org's already-archived FY2026 budget book contains a distinct, quantified "Internal Audit" service line the registry's own search missed (it checked the Corporate Services Service Area Presentation and City Manager Services budget note, not the CFO & Treasurer's own book). The biggest finding is a registry-completeness correction, not a priority-evolution narrative: Internal Audit has a real $3.112 million gross / $2.856 million net FY2026 operating budget, disclosed as a Service under the Office of the CFO and Treasurer, distinct from the Auditor General's Office (a separate, Council-reporting statutory accountability officer). This is a single-year, single-document data point — no evolution across time is possible. The open question is whether this org's registry row should be updated to point at the shared CFO book as its own archived source, the way BATCH12's shared-omnibus orgs already do.

Backgrounder summary

Internal Audit is a management-facing internal-controls function reporting to the Chief Financial Officer, distinct from the Council-reporting Auditor General's Office; it conducts audits, fraud investigations, and management advisory work (backgrounder, citing https://www.toronto.ca/city-government/accountability-operations-customer-service/city-administration/staff-directory-divisions-and-customer-service/internal-audit/, fetched). The backgrounder's own registry-completeness finding — that Internal Audit is in fact a named, budgeted CFO & Treasurer Service for FY2026 — is carried forward and cited with its primary-source figures below.

Series inventory

_index.json: 0 ok / 0 stub-suspected / 0 extract-failed under this org's own tor-internal-audit extraction directory — no document has ever been registered under this registry id.

Registry (our document registry) carries 1 row for this org (tor-internal-audit-oth-2026, year 2026, doc_type other); 0 are archived, 0 are staged, and 1 is missing. The row's flags field (dated 2026-07-24) states: "distinct from Auditor General's Office; No public work plan/reports link found on landing page...Confirmed via text search that Internal Audit/audit does not appear in the Corporate Services Service Area Presentation or City Manager Services 2026 budget note -- unlike the separately-named Auditor General's Office."

That search did not check the Office of the CFO and Treasurer's own FY2026 Program Summary book, which this review did check directly, and which does name Internal Audit as a Service:

This document is a shared budget-cluster book covering multiple CFO & Treasurer services (Financial Planning, Financial Strategy and Policy, Internal Audit, Insurance and Risk Management, Capital Markets, Purchasing and Materials Management, Strategic Enterprise Integration and Modernization); analysis here is scoped strictly to the "Internal Audit" service section (that batch’s own build note §B2 handling, applied even though this org's own registry row never pointed at this document).

Priority evolution

A single service-line entry in a single fiscal year's budget book cannot establish an evolution narrative. What the one entry does establish: for FY2026, Internal Audit's stated deliverable is "business and risk consulting on policies, processes and information systems; assurance services including the performance of compliance, operational, financial, forensic and internal control reviews," serving "Council, City divisions, agencies and corporations" (sha256-12 26c5d96ad4c7).

Priorities added, dropped, renamed

Not determinable — no prior-year Internal Audit service-line entry is registered anywhere in this corpus to compare against. The FY2026 book itself notes one narrative achievement relevant to this service without dating a specific change: "Enhanced the capacity of Internal Audit to proactively support management in addressing audit recommendations and providing quality assurance" (sha256-12 26c5d96ad4c7, Key Achievements and Success section) — described as a recent accomplishment, not framed as a change from a differently-named or differently-scoped prior function.

Budget & mandate inflection points

• FY2026 Internal Audit budget: $3.112 million gross, $255.8 thousand revenue, $2.856 million net operating (sha256-12 26c5d96ad4c7, By Service budget table) — the only budget figure available for this org from any source in this corpus.
• FY2026 performance target: 80% of the Internal Audit workplan's engagements cover key risks (sha256-12 26c5d96ad4c7, performance-measures table) — a stated target, not a multi-year trend, since no prior-year figure for this specific metric was located in the read portion of this shared document.

Ontario/Toronto relevance

Direct: this is a City of Toronto internal-controls division serving Council, City divisions, agencies and corporations city-wide (sha256-12 26c5d96ad4c7).

Residuals & gaps

• Registry-completeness finding, not a stub/extract-failed detector disagreement: the detector never ran against this org (no document was ever registered under its own registry id), so there is no stub/failed call to confirm or dispute. The finding here is a different, adjacent kind of QA signal — a registry gap: this org's own archive_status: missing verdict undercounts its real documentary footprint, because the relevant budget line exists in a sibling org's already-archived series that was never cross-checked against this registry id.
• Only the "Internal Audit" service section of the shared CFO & Treasurer book was read for this brief — the remaining ~30-40 pages of that book (covering Financial Planning, Financial Strategy and Policy, Insurance and Risk Management, Capital Markets, Purchasing and Materials Management, and Strategic Enterprise Integration and Modernization) were not read in full for this review, consistent with that batch’s own build note §A3's sampling-and-disclosure rule; those sections belong to other orgs' own briefs.
• This finding does not resolve the registry's own parent_org ambiguity: our public-body registry lists tor-deputy-city-manager-corporate-services as this org's parent, while the budget evidence here places it under the Office of the CFO and Treasurer for FY2026 reporting purposes — the two are not necessarily in conflict (see backgrounder), but this review could not independently resolve which is the more precise day-to-day reporting line.
• Recommended remediation (not performed in this review, no git commands available to this lane): add a registry row for tor-internal-audit pointing at the same URL/sha256 already registered for tor-finance-treasury-services-bud-2026, following the precedent BATCH12 already established for other shared-omnibus Toronto divisions.
• ⚠️ Still being checked: whether an equivalent FY2025 (not just FY2026) CFO & Treasurer book exists and also names Internal Audit as a Service — not checked this review; only the FY2026 book was located and read.