Completing part two and integrating parts one and two

The report has been presented in five volumes. Volume one presents a synthesis of Independent Evaluation Group's (IEG's) overall evaluation of the integrated internal controls framework, drawing on both parts one and two, together with a summary of the conclusions of the independent advisory panel to this evaluation (with their report attached in full in Volume one). It also contains the key findings and conclusions of both management's assessment and the Internal Audit Department (IAD) opinion and review; their full reports are also attached in volume three. Finally, Volume one presents IEG's overall conclusions and recommendations from this evaluation. Volume two contains, in addition to a final statistical annex, five annexes that place on record the more detailed analyses that were conducted. They are essentially reference sources, containing data and analysis which provide the underpinning for the findings and conclusions reflected in volume one. The annexes are divided into two sections: section one (Annexes A and B) deals with the review of the entity level controls (i.e., the subject of part two of the overall review). Annex A addresses approach and method, while annex B provides the detailed analysis of the results from management's questionnaire, the Entity Level Controls Questionnaire (ELCQ). Section two (Annexes C, D, and E) deals with the integration of findings from part one and part two, to form the basis for the overall evaluation of the integrated framework of controls that was discussed in volume one. Annex C deals with content that was not completed during part one (scope limitations and resolving identified deficiencies); annex D provides the detailed basis for the judgment that a material weakness exists in controls over Fraud and corruption (F&C); and annex E gives the analytical basis for IEG's composite evaluation of the integrated controls framework. Volume three contains two attachments: attachment first is management's report on the overall exercise and on the current part two, and attachment second is IAD's report on part two. Volume four contains the earlier report on part IB of the review: on the completion of part one is incorporating compliance testing of key controls. Volume five contains the first report on part IA of the review: on process mapping and effectiveness of control design.