WARNING - By their nature, text files cannot include scanned images and tables. 
The process of converting documents to text only, can cause formatting changes and 
misinterpretation of the contents can sometimes result. Wherever possible you 
should refer to the pdf version of this document.


CAIRNGORMS NATIONAL PARK AUTHORITY 
Audit Committee Paper 2 23/03/07 

CAIRNGORMS NATIONAL PARK AUTHORITY 


FOR DECISION 


Title: INTERNAL AUDIT REVIEW: HR SYSTEM 

Prepared by: DUNCAN GEDDES, DELOITTE 
DAVID CAMERON, HEAD OF CORPORATE SERVICES 


Purpose 

To present Deloitte’s internal audit findings on the operation of the Authority’s “Snowdrop” 
HR system. 


Recommendations 

The Committee is asked to: 

a) Consider the internal auditor’s findings on the operation of the Authority’s cash and 
cash flow management set out in Annex 1; 

b) Endorse the management responses to the recommendations for action. 


Executive Summary 

Deloitte, the Authority’s internal auditors, have undertaken a review of the Authority’s 
“Snowdrop” HR system as part of their approved internal audit work programme. The 
outcome of that review is set out in Deloitte’s report, at Annex 1 to this paper. 

The review finds that, in overall terms, the control environment is adequate, and highlights 
three areas of control where improvements could be made. The report makes three 
recommendations for action to improve the security of systems and use of the “Snowdrop” 
system’s software functionality. The Deloitte report includes draft management responses 
to these recommendations, including suggested responsibility and timescale for action 
where appropriate. 

There is a potential resource constraint around the enhanced use of some aspects of the 
software functionality highlighted within the management responses (recommendation 2.2, 
page 6) is drawn to members’ attention. 

Committee members should also note that Deloitte have not had the opportunity to consider 
these draft management responses prior to the issue of these Committee papers. The 
Deloitte report therefore remains a draft, and will be issued in final form after the 
Committee meeting.