Beruflich Dokumente
Kultur Dokumente
GMU /MoI was provided sustained logistics support at central and provincial
level, including in transition provinces to further enhance its day-to-day
functional capability. Office and IT equipments were procured for the GMU
units in Kabul and regions, towards regional gender enhancements.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 17
Over the previous two years, LOTFA had established the Afghan National
Police Women Association (ANPWA) in MoI (Kabul) and targeted regional
zones of Nangarhar, Herat and Balkh as an informal platform for recruited
women police to share experiences and concerns. Monthly meetings of the
ANPWA were facilitated. On-the-job training towards formulation of project
proposals was provided, as a capacity development measure.
Pillar 3: Community policing: Building of effective police community
partnerships under police-e-mardumi project
1. Police community partnerships strengthened for enhanced for enhanced local
security, service delivery and accountability
a) Institutionalization of police-community meetings
Institutional mechanisms were established in the pilot phase in 8 districts of
Kabul for regular police-community interface that continued to be functional
for resolution of local issues and information sharing. For the phase-II
provincial expansion, community consultations in 14 districts / sub-districts
of Nangarhar and Laghman were progressed while the RFPs relating to the
remaining districts were sent up for approval to the relevant UNDP channel
or re-advertised on the account of lack of technically qualified responses.
The results based on periodic assessments by MoI-LOTFA-NTM-A were
encouraging.
Additionally, police and community sports programme to strengthen police
and community relationships and improve police fitness and discipline were
commenced in eight districts of Nangarhar province, six districts in
J alalabad city and one district in Laghman province. As precursors to actual
sports events, information sessions were conducted highlighting relevant
aspects of the constitution, laws and religious teachings that touched on the
need for strong cooperation between the police and the community and the
health and discipline benefits to both the police and community from
participating in sport.
b) Knowledge building and advocacy on community policing issues
Interaction with civil society organizations and media was undertaken for
advocacy on local policing and security issues. Contracts were awarded in
Quarter-4 relating to (i) 5 Universities outreach, (ii) community policing best
practices documentary, and (iii) conduct of series of policy seminars which
have integral components of advocacy. During 2011, awareness building
regional workshops were organized in Balkh, Herat, Panjsher, Parwan and
Nangarhar with participation of regional and provincial police chiefs,
Governors, local communities and civil society. This contributed to
enhanced knowledge about policing roles among the local communities.
c) Promotion of womens platform to build knowledge on
In the pilot phase of this activity, womens shuras were established n 7
Kabul pilot districts. Womens views on security matters were considered to
be productive and taken more seriously by the police towards enhanced
service delivery. A Conference on Women and Security was held on 8-9
October, 2011, which came up with strong recommendations relating to
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 18
gender justice, gender and crime, womens rights, access to 119 helpline and
Afghan law relating to women.
d) Establishment of CRCs and trainings on service delivery for the police
The Kandahar Police Crisis Response Centre (CRC/No. 100 helpline) was
set up and operational trainings on SOP procedures provided for receiving
and following up on complaints. As per the feed-back from MoI, Kandahar
CRC received around 400 calls per day, of which 8-10 were valid cases
relating to insurgency, street fighting and seeking general information on
police services. Building on this, there was proposal for setting up of CRCs
in Herat, Balkh and Nangarhar police zones but there was some delay in this
as MoI was in process of standardizing the 119 number across the country
with more advanced operational technology (regional centers were to use the
same technological applications as the Kabul centre). The contract will be
awarded in the beginning of 2012.
e) Establishment of information desks at police stations
Information desks were established in 12districts (in addition to the 8 pilot
districts), 4 each in Kabul, Nangarhar and Herat -to support a positive
police-community interface as well as to record and follow-up on
complaints. The progress report was shared with all stakeholders.
Another contract for establishment of information desks in additional 31
districts was awarded to the selected firm for a 6-month implementation
period and work is in progress. This was complemented with needs-
assessment trainings on operation of the desks and equipping the centers
with the necessary infrastructure. This led to improved information gathering
and sharing between the police and local communities, resulting in better
security and police delivery.
f) Development of public awareness/education campaigns using multiple
media tools
Public awareness campaigns had been instituted in the pilot phase on ways
for the communities to know about the police work, reach out to the police
for seeking effective assistance and rendering information on local issues
(including on insurgent activity).For the provincial expansion phase, during
Quarter-3, there was a proposal for public awareness and education
campaign for Herat, Balkh and Nangarhar regions. However, the RFP had to
be recalled as MoI was in process of standardizing the central 119 centre and
wanted the same system to be used for all provincial public awareness tools.
A competitive International Police Film Festival was also finalized in which
grants are proposed to be given to 10 best proposals for production of short
films based on police themes specific to local communities. This is expected
to encourage positive developments between police and local Afghans in the
civil security and peace-building process. Apart from showcasing the
perspectives that define the ANP, it will provide a springboard for dialogue
between the MoI and civil society.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 19
1.9 Review of Monitoring and Evaluation
We reviewed the minutes of the meetings of the Steering Committee and assessed
whether the clear guideline is provided on the implementation of the project activities
and regular oversight is exercised through required quarterly meetings. Regular
steering committee meetings were held during the quarter.
Further, we reviewed the annual work plan, project document and progress reports
and monthly reports of monitoring agent.
1.10 Field Visits
We conducted field visits to Central Ministry Kabul, J alalabad, Kandahar Herat and
Kabul Province and reviewed the documents. Our review included the verification of
expenses at site offices, review of police personnel files and review of procurement
documents. We also conducted visits to police stations on test basis and interviewed
the policemen.
1.11 Review of Project Progress and Assessment of Internal Control Systems
a) Review of Project Progress
We reviewed the management aspects in terms of Project approvals, work plans,
budget formulations, Project resources, monitoring and evaluation of
implementation towards achievement the Project objectives and periodic progress
reporting against planned objectives and work plans.
Findings in this specific area are as follows;
Limited Monitoring of Government disbursements by UNDP LOTFA
Reconciliation for differences between salary records of Ministry of interior
and Ministry of Finance was not prepared at Central Ministry, Kabul office
and J alalabad office.
Continued uncertainty regarding New Kabul Bank, with potential implication
for LOTFA funds as most ANP accounts are maintained in Kabul Bank
risking payment of salaries to ANP
b) Assessment of Internal control
We have assessed the adequacy of operational and internal control systems by
reviewing the following areas:
Human Resources
Finance
Procurement
Asset Management
Cash Management
General Administration
Information Systems
Results of our assessment of internal control systems in the areas as discussed earlier
are produced briefly along with standard audit ratings as per Annexure 1. Based on
our assessment, overall rating is Satisfactory.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 20
Finance
We evaluated the adequacy of the accounting and financial operations and
reportingsystems. These include review of controls relating to budget control, cash
management, certification and approving authority,receipt of funds, disbursement of
funds, recording of all financial transactions in expenditure reports, records
maintenance and control.
Specific procedures included the following:
Review the implementing partner accounting records and assess their adequacy
formaintaining accurate and complete records of receipts and disbursements of
cash; and forsupporting the preparation of quarterly financial report.
Review expenditures made by MoI and assess whether these are inaccordance
with project document, annual work plan and budgets; and are in compliance
with theUNDP User Guide on Results Management.
Review the records of requests for direct payments and ensure that they were
signed and approved byauthorised government and UNDP country office
officials.
Findings in this specific area are as follows;
Limited cases of double Payment of salaries in Kandahar and difference between
number of police personnel as per HR and EPS records
Non-compliance with provisions of Afghanistan Income Tax Law
Based on our assessment of this area our comment on rating for this area is Partially
Satisfactory.
Human Resources
Our review in this particular area covered the internal controls to ensure the
competitiveness, transparency and effectiveness of the recruitmentprocedures for
hiring of personnel and further internal controls relating to performance appraisal,
attendance control and management of personnel records.
Specific procedures included review of the process for recruiting project
personnel and consultants and assess whether itwas transparent and
competitive.
Review of personnel files of project personnel and police to assess proper
management of personnel records
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
Procurement
We evaluated the competitiveness, transparency and effectiveness of theprocurement
activities of the Project in order to ensure that the equipment and services
purchasedmeet the requirement of LOTFA and review the internal controls including:
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 21
Delegations of authorities, procurement thresholds, call for bids andproposals,
evaluation of bids and proposals and approval/signature of contracts
andpurchase orders;
Preparation of receiving and inspection procedures to determine the conformity
of equipment with theagreed specifications and, when applicable, the use of
independent experts to inspect thedelivery of highly technical and expensive
equipment;
Evaluation of the procedures established to mitigate the risk of purchasing
equipment thatdo not meet specifications or is later proven to be defective;
Management and control over the variation orders.
We also evaluated the use of consulting firms and theadequacy of procedures to
obtain fully qualified and experienced personnel and assessment oftheir work before
final payment is made.
Specific procedures included review the process for procurement/contracting
activities and assess whether it wastransparent and competitive.
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
Asset Management
We reviewed the adequacy of the procedures for receipt, storage, and disposal of the
equipment including vehicles and office equipment purchased for the use of the
Project.
Specific procedures included review the use, control and disposal of non-expendable
equipment and assess whether itis in compliance with UNDP User Guide on Results
Management; and also whether theequipment procured met the identified needs and
whether its use was in line withintended purposes.
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
Cash Management
We reviewed the adequacy of the operational and internal controls relating to cash
funds held by the Project and review procedures forsafeguarding of cash.
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
General Administration
We reviewed the operational and internal controls relating to travel activities, vehicle
management, shipping services, officepremises and lease management, office
communications, and records maintenance.
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 22
Information Systems
We assessed the adequacy, efficiency and security of the information systems,
particularly those established and maintained from project funds to meet the
management and reporting requirements of the Project.
Findings in this specific area are as follows;
Lack of or inadequate information system controls and checks
Based on our assessment of this area our comment on rating for this area is
Satisfactory.
1.12 Acknowledgement
We wish to place on record our thanks and appreciation to the management of the
Project, relevant Government personnel in Ministries and UNDP Country Office of
Afghanistan for the cooperation extended to us during the audit.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 23
2. Detailed audit observations
Observation No: 1
Audit area: Project Management
Issue title: Limited monitoring of Government disbursements
procedures by UNDP LOTFA
Condition
Salaries of police staff are initiated by Ministry of Interior (MoI) based on records
from Electronic Payroll System (EPS) and province-wise departmental payrolls are
prepared in the form of M-41 together with payment voucher in the form of M-16.
The information is directly submitted to Ministry of Finance (MoF) for its review and
processing. Upon completion of all relevant reviews and approvals by MoF, bank
intimation letters for transfer of funds are circularized to Da Afghanistan Bank (DAB)
with copy to MoI, from where it is forwarded to the concerned departments. The
concerned personnel from all departments approach their relevant banks with details
regarding staff salaries and bank accounts for transfer of payments accordingly.
We observed that a limited review and monitoring is being carried out by UNDP
LOTFA Project over this process from inception to final payment to the police force.
Criteria
As per UNDP Monitoring and Evaluation policy, Monitoring and evaluation are
essential management functions that are interactive and mutually supportive.
Monitoring and evaluation must be continuously strengthened to enable UNDP to
respond to demands for:
Greater accountability in the use of resources;
A clearer basis for decision-making; and
More practical lessons from experience to guide future development
interventions.
Cause
Lack of/or inadequate guidance/supervision at project level
Impact or risk
Limited monitoring of Government disbursement may have the following
impacts/risks;
Funds may be utilized for purposes/activities other than the project objectives.
Funds may be utilized for activities not included in the Annual Work Plan.
Excessive costs may be incurred for project activities leading to inefficiencies.
Financial irregularities at project level may remain unidentified on timely basis.
Payments may be made for activities not actually incurred.
Recommendation
We recommend that LOTFA Project management should continue reviewing EPS
data on regular basis to avoid any human errors and thereby ensure that all the
information from EPS is updated on regular intervals for staff inducted and or
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 24
terminated and the line ministries documentation is complete, in-line with the
government rules and regulations and processed adequately.
Risk level
High
Management comments
LOTFA can only play a limited role in monitoring the government disbursement
procedures EPS data is already updated on monthly basis, and shared with
stakeholders However, LOTFA will assign EPS team to undertake regular checks and
monitor EPS data to ensure further improvement in data accuracy and avoid possible
human errors.
Responsible Manager
Project Manager
Expected Completion Date
31 May 2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 25
Observation No: 2
Audit area: Project Management
Issue title: Reconciliation of records between MoI and MoF not
prepared on quarterly basis
Condition
While reviewing the information flow of police force salary disbursements, we have
observed differences between salary and food expenses records of MoI and MoF.We
were given understanding by the Project management that these are timing
differences because reports from provinces are received late due to security and
logistics concerns and at times payments are delayed/ rejected by MoF due to non-
availability of budgets or non-compliance of certain procedural activities by MoI.
We were also given understanding that reconciliation is prepared on annual basis.
However, we noted that the reconciliation between salary and food expenses records
of MoI and MoF was not prepared till the date of this report at Central Ministry
whereas in J alalabad, Kabul, Herat and Kandahar offices MoF data regarding police
salaries in the form of AFMIS reports was not available.
Criteria
Since data entry errors or other types of mistakes may occur when information is
recorded from various sources, it is important to identify those errors and make
corrections on timely basis. Account reconciliations are an important component of
internal control strategy designed to reduce risks and ensure quality of financial
information. Timely reconciliation of project records provides effective control over
project activities and also helps to detect mistakes/errors in financial records on
timely basis.
Cause
Lack of/or inadequate guidance/supervision at project level
Lack of/or insufficient human and technical resources
Impact or risk
There is a risk that the timing differences are not reconciled on timely basis; and
There is a risk of overstatement/understatement of salary and food expense in
monthly reporting and risk of inappropriate use of resources of the Project.
Recommendation
We recommend that salary and food expenses reconciliation between records as
per Ministry of Finance (MoF) and Ministry of Interior (MoI) should be
prepared on regular intervals at least on quarterly basis as appropriate.
We further recommend that measures should be taken to get the information
from provinces on timely basis and provinces that lack adequate resources to
submit the required information within the stipulated time should be equipped
with the minimum required relevant support for an efficient and effective
submission of the information.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 26
Risk level
High
Management comments
The discrepancies are due to timing differences and reports from provinces are not
received by MoI on timely manner due to security and logistics constraints.
Sometimes payments are delayed/ rejected by MoF due to non-availability of
allotment. The final reconciliation is only maintained on annual basis upon receipt of
complete annual data from provinces. Reconciliation for 1389 was shown to the
audit team and the team was satisfied with it. For 1390, the complete MoI data will
be available from all provinces around a month after the closure of the AFY.
However, the full reconciliation has been done with MoF AFMIS. Quarterly
reconciliation is possible but it will not fully accurate and complete. As per GoA
financial management system the reconciliation is due at the end of each financial
year. Besides, transfer of documents from vulnerable provinces is risky practice for
MoI and it is may not be possible to get these documents from remote provinces on
quarterly basis. The recommendation is noted.
Responsible Manager
Project Manager
Expected Completion Date
15 J une 2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 27
Observation No: 3
Audit area: Project Management
Issue title: Uncertainty regarding New Kabul Bank
Condition
We observed that around 83% of the police force salaries are paid through Electronic
Fund Transfer (EFT) mechanism and as designated disbursement agent, police staffs
have to maintain their bank accounts with New Kabul Bank. It is worth mentioning
that there had been reports in early August 2010 about misappropriations and large
financial losses in Kabul Bank, the operations of which have been taken over by the
New Kabul Bank. No analysis of risks involved has been carried out and documented
to continue maintaining accounts of police staffs in the New Kabul Bank.
Criteria
As per the requirements of Project documents, the Project under its consolidated 3
pillars window has to cover the following prioritized components including but not
limited to;
Payment of police force remuneration.
Payment of remuneration of uniformed personnel employed by the Central Prison
Department (CPD).
Cause
Inadequate planning
Impact or risk
Uncertainty attached to New Kabul Bank due to takeover of operations of Kabul
Bank may affect payment of salaries to Police and Central Prison Department (CPD).
Recommendation
We recommend that Project management should take appropriate steps and encourage
Ministry of Finance to expand the banking base by awarding contracts to other banks
operating in Afghanistan for payments of police force salaries in order to diversify the
risks relating to payment of police remunerations through only one bank.
Risk level
Medium
Management comments
The issue has been raised several times with MoF and also raised regularly at
LOTFA Steering Committee meetings. MoF has provided complete assurances for
smooth operations of New Kabul Bank. The salary payments have not been affected in
any manner. In worst case scenario, MoF has alternative Option B of payment by
list but this is not likely to happen. Award of contracts to other banks is fully MoF
decision. However other banks have not yet expanded their branches on provincial
and district level which is a gradual process and require resources, infrastructure
and authorizations from the Central Bank. 4 banks were contracted initially for the
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 28
services of government employees, but apart from new Kabul Bank, only Azizi Bank
was part of EFT initiation and that too, only in Khost and Nanagarhar provinces.
Other banks were have not been able to establish banking infrastructure at provincial
levels for police at provincial levels.
Responsible Manager
Project Manager
Expected Completion Date
30 September 2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 29
Observation No: 4
Audit area: Finance
Issue title: Limited cases of double payment of salaries in Kandahar
and difference between number of police personnel as per
HR and EPS records
Condition
During the course of our field visit to J alalabad and Kandahar offices, we noted
certain instances of double payments of salaries in employees bank accounts. We
observed that data of some employees was posted twice in Form M-41 (EPS) which
resulted in double payment of salaries to the employees. Further, we noted certain
instances where EPS contained different employee names with the same bank account
numbers. Instances where double payments of salaries were found in Kandahar Office
are as follows:
Name of Staff Father Name Bank A/C # Department Designation
Amount
(Afs)
Abdullah Rajab 005-66705679
Police Hawza 7
Kandahar
Sarabaz Police
Milli
11,537
Abdullah Rajab 005-66705679
QataGarnizon Q
1 Kandahar
Sarabaz Police
Milli
11,537
Abdul Raziq Amir
Mohammad
005-66689189
Police Hawza 2
Kandahar
Sarabaz Police
Milli
11,537
Abdul Raziq Amir
Mohammad
005-66689189
Police Hawza
12 Kandahar
Sarabaz Police
Milli
11,537
Shafqatullah A.Zahir 005-66723166 Kamarband
officers
11,537
Shafqatullah A.Zahir 005-66723166 KandakKamar
bank shehriNo.1
3
rd
Satanman 13,174
Abdul Karim M. Rahim 1005112005851 Police
TooliQarargah
Sarabaz Police
Milli
11,537
M.Karim Abdul Rahim 1005112005851 Police
TooliQarargah
Sarabaz Police
Milli
11,537
Bashir Ahmed Fida
Mohammad
005-66702643 Q 1 Pinjwai
Kabul Bank
Sarabaz Police
Milli
11,537
Bashir Ahmed Fida
Mohammad
005-66702643 Police Hawza
15 Kandahar
Sarabaz Police
Milli
11,537
Abdul
Hameed
Gul Ahmed 005-66731091
Q 1 maiwand
Kabul Bank
Sarabaz Police
Milli
11,537
Abdul
Hameed
Gul Ahmed 005-66731091
Q 1 maiwand
Kabul Bank
Sarabaz Police
Milli
11,537
Abdul
Hameed
Gul Ahmed 005-66731091
Q 1 maiwand
Kabul Bank
Sarabaz Police
Milli
11,537
Instances where EPS data contained different employee names with same bank
account numbers resulting in double payment of salaries in a single account in
J alalabad office;
Name of
Staff
Father
Name
Bank A/C # Department Designation
Amount
(Afs)
Ningyali Kalamdin 00701481018361 Q 1
WalswaliNazy
an
3
rd
Satanman 11,938
Ningyali M. Zaman 00701481018361
Q 1
WalswaliAche
3
rd
Satanman 11,939
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 30
Name of
Staff
Father
Name
Bank A/C # Department Designation
Amount
(Afs)
en
Auaz Khan Gulroz 00701481033514
Q 1
WalswaliHasar
ak
Sarabaz Police
Milli
10,191
Mir Kalan Khushal 00701481033514
Q 1
WalswaliHasar
ak
Sarabaz Police
Milli
10,191
MujeebUllah A.Rahman 000703103098173 Q 1
WalswaliPajee
ra gam
Sarabaz Police
Milli
10,191
IzatUllah M. Hakim 000703103098173 Q 1 Walswali
Kama
Sarabaz Police
Milli
10,191
Najeeb ShaftaloGul 000703104305366
Lonistar LumriSatanma
n
13,839
Ahmed
Sharif
Abdul Rafu 000703104305366
Lonistar LumriSatanma
n
13,840
We also observed differences between number of police personnel as per HR record
maintained by MOI and EPS records. We noted that EPS record was showing excess
number of police personnel than the number of police personnel appearing in the HR
record. Instances of such differences for the month of December 2011 are as under:
Area/Province
No. of Staff As Per
HR Record
No. of Staff As Per
EPS Record
Excess No. of Staff
As Per EPS
Asmayi Region 37,414 38,523 1,109
Shumshad HQ 202 346 352 4
Nangarhar 3,205 3,405 200
Parwan 1,171 1,262 91
Kapisa 1,003 1,069 66
Nuristan 2,657 2,658 1
Kunar 1,491 1,920 429
Laghman 1,018 1,043 25
Pamir HQ 300 457 989 532
Balkh 2,339 2,357 18
Kunduz 2,054 2,203 149
Badakhshan 1,884 2,103 219
J awzjan 1,047 1,085 38
Baghlan 2,904 2,954 50
Samangan 928 933 5
Daikondy 1,033 1,045 12
Paktiya 1,933 1,980 47
Logar 798 1,094 296
Wardak 1,217 1,235 18
Ansar HQ 606 731 914 183
Badghis 1,786 1,834 48
Moreover, we also observed that EPS contained domain/column for National ID card
number of employees. However employees bank account numbers were used instead
of National ID card number.
Criteria
As per the approved Annual Work Plan the project activities include;
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 31
Production/generation of police computerized payroll transparently, accurately
and on timely basis; and
Monitoring and verifying police payments
Provision of quality HR data for payroll report
Cause
Lack of/or inadequate policies/procedures/guidelines;
Lack of/or inadequate guidance/supervision at project level;
Inadequate training
Human error
Impact or risk
Double payment of salaries to staff results in direct financial losses to the
Project.
Differences in personnel records between HR and EPS may have following
impacts/risks:
o Salaries may be paid to persons who are not actually on the payroll.
o Double payments of salaries may be made to staff members.
Recommendation
We recommend that cases of double payments should be investigated and corrective
actions be taken on priority basis.
We also recommend that differences between the captioned records should be
investigated and reconciled on priority basis. Further, employees ID card number
should be used in EPS in specified domain and duplication checks should be
implemented in EPS to detect similar records.
Risk level
High
Management comments
In general, based on MoF procedures, individual checks are not authorized for
unpaid salary from previous month. Payment of previous month salary is recorded in
the EPS separately showing double record. Well established manual HR system is in
place to make sure that salary is not reported twice.
In case of Nangarhar, the audit team revived initial report received from districts
which is filtered and worked to prepare unified M-41 (salary report). However, due
to attack on New Kabul Bank in Nangarhar the salaries in Qous were temporary paid
through pay by list. Copies of evidences of individually signed M-41 for the
mentioned month, where the payments were only made once to these ANPs, were
provided.
In the case of Kandahar, there were indeed, 2 cases of double payments. This is a
very small size for a Kandahar EPS force size of 9,554 by end 2011. But it is well
noted. Directive has been issued by MoI for recovery of these payments. The issue
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 32
will be regularly followed through LOTFA monitoring agent teams in headquarter
regions and provinces.
In the past too, there were limited instances of double payments reported by the
LOTFA Monitoring Agent as well in Kandahar. Soon after receipt of MA report, MoI
deployed its internal audit and the money was swiftly recovered. Proof was provided
to the auditors.
2. EPS team is already doing reconciliation of data on monthly basis. With respect to
use of police ID number in specified domain, ID numbers are indeed, being used in
all cases where these are available. However, the ID card process is being handled
by DynCorps and they have not been able to issue ID cards to all ANP which are
based on physical verification, biometrics, etc. In cased where police ID numbers
have not been issued, national ID (tashkira) or registration number is used as unique
ID. This system is working well but will continue to monitor.
Responsible Manager
Project Manager
Expected Completion Date
30 J une 2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 33
Observation No: 5
Audit area: Finance
Issue title: Non-compliance with provisions of Afghanistan Income
Tax Law
Condition
We observed that taxes on salaries of local staff were not withheld and paid to
government authorities as per provisions contained in Afghanistan Income Tax Law
2009 for the Service contract holder staff.
Criteria
Article 58 of Income Tax Law 2009 of Afghanistan states that:
All natural or legal profit and non -profit persons, ministries, state enterprises,
municipalities and other State departments employing two or more employees in any
month of a year shall be required to withhold taxes as provided in Article 4 of this
Law from payment of salaries and wages and pay the amount withheld to the
Government account.
Further, UNDP Service Contracts Policies states that:
The remuneration paid to the SC is not exempt from national or local taxation.
UNDP is not responsible for payment of tax on earnings or other taxes due on the
remuneration of the SC, nor is UNDP responsible for reimbursement of taxes paid by
SC holders in respect of earnings received under SC with UNDP. The payment of
taxes is the sole responsibility of the individual under SC. UNDP reserves the right to
request proof of payment of taxes by the SC holder.
Cause
Inadequate guidance/monitoring at UNDP country office level
Impact or risk
Non-payment of taxes may lead to tax penalties and additional taxes. Moreover, for
all income taxes, including staff salaries, provisions of Afghanistan Income Tax Law
2009 supersede any other contractual obligations. Therefore, the liability to withheld
and deposit staff taxes rests with the employer and mere insertion of clause in staff
contracts cannot eliminate employers liability.
Recommendation
We recommend that the Services Contract holders should comply with the provisions
of Afghanistan Income Tax Laws and UNDP service contracts policies whereas
measures should be taken by UNDP to resolve all tax related issues with the
government authorities.
Risk level
Medium
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 34
Management comments
This is a UNDP management issue. LOTFA will follow up on any directive issued
from the CO senior management.
Responsible Manager
Project Manager
Expected Completion Date
31 J uly2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 35
Observation No: 6
Audit area: Information Technology
Issue title: Lack of or inadequate information system controls and
checks
Condition
We observed a number of control discrepancies while reviewing the adequacy,
efficiency and security of the information systems in terms of meeting management
and reporting requirements of the Project. As Electronic Payroll System plays vital
role in initiation, processing and recording of police staff salaries and other relevant
payments, we deem it necessary to bring all shortcomings in the system for
management to address. These are detailed below:
Consolidation of reports from EPS including financial reports comprising of staff
salaries and food allowances records, HR reports etc is prepared manually. EPS
System does not provide the options for integrating the offline branches data in a
central location to generate the consolidated reports.
The project is using two versions of EPS, of which one is standalone and the
other is web based. However there is no integration between both versions of
application. Central Office manually prepares the consolidation on the basis of
both application data separately.
The MoIis using a decentralized, legacy-based application and security controls
are not implemented.
Physical access controls are not implemented by the project to detect, prevent and
or mitigate unauthorized access to EPS.
Approvals for user ID are not obtained. IT support staff provides access to the
branches staffs as per their requirement after visiting the remote office.
User IDs of Electronic Payroll System does not meet standard practice naming
conventions.
In certain branches salary is paid to the staff on cash basis. However, there is no
option in the EPS to record the cash payment made to the staff.
MoI does not have the documented backup policy, and periodic testing of backup
is not properly documented. Further, periodic backup restoration is not being
performed to ensure the effectiveness of the backups and the quality of backup
media.
Daily application log is not being generated by the application to monitor the
activities especially in offline branches where finance staffs authorize changes
and use administrator ID to archive the monthly data and make the changes in the
parameters.
Criteria
Individual criteria are detailed below:
As per approved Annual work plan, the project activities include implementation
of centralized web-based EPS system to cover all the provinces.
According to risk analysis carried out at project level, the project document raises
question regarding security/confidentially of information and provides assurances
to protect the confidentially and security of projects information by
implementing following control techniques:
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 36
Identify clear communication nodal points in each department so that
confidential information regarding personnel is not leaked out or available to
unauthorized persons under any circumstance; and
The implementation of advance centralized web-based (more secure) EPS
payroll
As per standard Information technology practices, following system controls and
checks should be adopted:
There should be integration between various systems used by the
entity/project and system should have capability of generating the
consolidated reports instead of preparing them manually.
Allocation of user IDs and system access rights should be backed by
appropriate approvals to ensure user accountability and
integrity/confidentially of information.
User IDs in Information system should follow the standard naming
conventions such as allocated employee ID number, National ID number
Information system should have the capability to record and trace the
payments
The entity/project should have a documented backup policy as a part of
overall information technology policy
The system should have built in monitoring controls and should have the
capability to provide logs in respect of user activities to ensure integrity of
information
Cause
Lack of/or inadequate guidance/supervision at project level
Lack of/or inadequate policies/procedures/guidelines
Lack of/or insufficient technical resources
Impact or risk
Lack of adequate and adoption of standard procedures in information based system
critical to the financial reporting and limited monitoring controls and checks might
lead to the following substantial risk:
Preparation of manual reports may result in under-utilization of the system and
un-necessary overhead expenses. Additionally the manual work increases the risk
of human errors as compared against the system automation.
Non-integration of the web-based and standalone applications may have the risks
of data redundancy, duplication and vulnerability to manipulation whereas
erroneous reporting and human errors might also be caused leading to waste of
resources in terms of time, efforts and costs.
Legacy-based applications provide insufficient and ineffective controls over
application security and expose entitys critical data to loss or limiting its
confidentiality, integrity and availability.
Lack of proper approval for issuance of user IDs might lead the project to the
risks of limited user accountability, inconsistency in assignment of access rights
and difficulties in tracking user activities.
In cases where information system does not meet the naming conventions, the
project might fail to observe proper accountability of users accessing into the
system besides inconsistency in user-ids.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 37
Not recording cash disbursements to staffs in the EPS might lead to duplicate and
or unauthorized to staff and difficulties in tracking payments.
Without regular testing of the backup tapes and cartridges, there is a risk of
accidental loss of backup data. Further, in the absence of documentation of
backup test results management may not be able to know the errors and problems
faced during the restoration process.
Without completion of Logs, there is no assurance that correct changes are
implemented, correct data is entered and authorized and parameters are defined
according to the instructions.
Recommendation
We have provided detailed recommendations as follows:
In order to ensure the effective reporting, as well as to reduce the manual
overheads, the consolidation process should be automated in EPS and same
system should deploy throughout the regions.
Management should consider integration between web based and standalone EPS
application.
The project should deploy WEPS Application covering the current security
requirements and standards that fulfils the entitys medium to long-term business
requirements.
Project management should ensure that allocation of users ID assigned to each
user on application are properly approved and documented.
Project management should establish procedures to ensure that user IDs created in
the applications should comply with the best practice naming convention
standards.
Management should incorporate appropriate check and balance in system to
ensure effective operations of the project activities and to avoid risks relating to
cash payments.
Backup data, tapes and devises should be regularly tested to prevent accidental
loss. It is prudent to attempt a restore of the system from backup tapes at regular
intervals, in order to ensure that the data stored is both usable and appropriate.
Test results should be properly documented and authorized by management and
backup should be stored in taps and moved to offside location and IT staff should
maintain the inventory of media with proper label showing the time stamp along
with backup type.
Project management should consider introducing changes in the system in order
to ensure that logs are available for review to verify that the changes are made in
data according to the given instructions. Further Logs should be reviewed
periodically in order to ensure the compliance of the given instructions.
Risk level
Medium
Management comments
1. LOTFA developed the new central version payroll for MOI which is under
implementation phase at national and sub-national levels. The subject issue will
be resolved soon after full implementation of WEPS.
2. There is full synchronizations between both systems, making data integration
easy and efficient.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 38
3. The system has been built taking into account the role-based security model and
only the WEPS administration have the full privilege to give access to end-users.
4. Security logs are regularly maintained by the WEPS/EPS system to monitor the
end-user activities.
5. In every payroll station only two end-users are authorized to access the
EPS/WEPS: finance officer and EPS Operator.
6. The security naming convention maintained by the system matches the naming
convention and it is case sensitive.
7. EPS maintains records for those ANPs which are paid by cash and separate
reports prepared on monthly basis.
8. The backup policy is developed and maintained by the MOI ICT and LOTFA is
complying with that policy. Besides that, LOTFAEPS has the licensed backup
software installed in WEPS main server, which makes back-up the complete
image of SQL Server data on timely basis (as per the schedule set by the WEPS
administrator) and it is stored in three separate physical locations to ensure the
data restoration in case of any disaster.
9. User trace utility is configured and reports generated by the WEPS. However,
only WEPS administration have the privilege access the reports.
Responsible Manager
Project Manager
Expected Completion Date
30 J une 2012
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 39
3. Certified prior year (2010) follow-up action plan (attachment)
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 40
ANNEXURE I
Definition of Standard Audit Ratings
Standard Rating Definition
Satisfactory Internal controls and risk management practices were
adequately established and functioning well. No high
risk areas were identified. Overall, the office objectives
are likely to be achieved.
Partially Satisfactory Internal controls and risk management practices were
generally established and functioning, but needed
improvement. One or more high and medium risk
areas were identified that may impact on the
achievement of office objectives.
Unsatisfactory Internal controls and risk management practices were
either not established or not functioning well. The
majority of issues identified were high risk. Hence, on
the overall, office objectives are not likely to be
achieved.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 41
ANNEXURE II
Categorization of Audit Findings by Risk Severity
Priority Definition
High Action that is considered imperative to ensure that
UNDP is not exposed to high risk (i.e. failure to take
action could result in major consequences and issues).
Medium Action that is considered necessary to avoid exposure
to significant risks (i.e. failure to take action could
result in significant consequences).
Low Action that is considered desirables and should result
in enhanced control or better value for money.
kpmg
KPMG Afghanistan Limited Management Letter
UNDP Country Office Afghanistan/Law and Order Trust Fund for
Afghanistan (LOTFA) 00061104
Page 42
ANNEXURE III
Classification of Possible Causes of Audit Findings
1. Lack of/or inadequate policies/procedures/guidelines
2. Lack of/or inadequate guidance/supervision at the project level
3. Inadequate guidance/monitoring at UNDP country office level
4. Lack of/or insufficient resources (financial, human or technical resources)
5. Inadequate planning
6. Inadequate training
7. Human error
8. Intentional overriding of internal controls
9. Inadequate management structure