A Performance Audit
An Audit of Cybersecurity at the Health Professions Council
August 2025
Overview
The Health Professions Council (Council) had significant weaknesses in managing some elements of its information resources but implemented certain information system security processes and controls to meet statutory requirements and Department of Information Resources standards.
To minimize security risks, auditors communicated details about the audit findings separately to the Council in a confidential report.