Page 133 - Hospital Authority Annual Report 2019-2020

Appendix 3
附錄 3

Focus of Work in 2019-20 2019-20 年度工作概況

The Committee exercised active oversight of internal audit function of 審計及風險管理委員會積極監察醫管局的內部審
HA, considered matters related to the audit of HA’s financial statements, 計職能、審議有關醫管局財務報表審計的事宜，
and oversaw the effectiveness of risk management and internal controls 以及監察醫管局風險管理及內部管控的成效。在
at HA. In 2019-20, the Committee conducted four regular meetings and 2019-20年度，委員會共召開四次定期會議，並因
transacted business planned for two scheduled meetings in early 2020 by 應2019冠狀病毒病疫情而將原訂於2020年初的兩
circulation instead, due to the COVID-19 outbreak. 次會議上審議的事宜改以傳閱方式處理。

In regard to HA’s internal audit function, the Committee received from 在醫管局內部審計職能方面，委員會收閱總內部審
Chief Internal Auditor quarterly progress reports on audit results on 計師提交的季度報告，報告載列醫管局不同運作範
HA’s operational areas. The discussions focused on audit conclusions, 疇的審計結果。委員會集中討論審計結論、審計師
major audit observations and corresponding follow-up action plans. 的主要意見及相應的跟進計劃。年內審閱的主要內
Key internal audits considered by the Committee in 2019-20 covered 部審計項目涵蓋醫院運作及機構管理的不同範疇，
different hospital operation and corporate management areas, including 包括「網絡安全」、「急症科病房」、「護士人手短
cybersecurity, emergency medicine wards, nursing manpower shortage, 缺」、「化驗結果」及「臨床系統審計分析」。此外，
laboratory results, and audit analytics on clinical systems. During the 委員會批核內部審計約章的修訂，使更清晰反映醫
year, the Committee approved revisions to the Internal Audit Charter 管局內部審計職能的獨立性。為就2020-21年度進
to better reflect the organisational independence of HA’s internal audit 行規劃，委員會參與訂定內部審計的優先範疇，並
function. In planning ahead for 2020-21, the Committee took part in 批核內部審計計劃。
prioritising areas for internal audits and approved the Internal Audit Plan.

Through a joint meeting with the Finance Committee, the Committee 委員會在聯同財務委員會的會議上，審閱及通過醫
reviewed and endorsed HA’s draft audited financial statements for 管局2018-19年度經審核的財務報表擬本。委員會
2018-19. The Committee also considered reports from the external 亦審閱外聘核數師就2018-19年度內部規管事宜、
auditor on the 2018-19 internal control matters, the results of the 醫管局風險評估結果及2019-20年度財務報表審計
external auditor’s risk assessment of HA and the 2019-20 financial 工作計劃的報告，並就2019-20及2020-21財政年
statement audit work plan. Re-appointment of external auditor of HA for 度通過重聘外聘核數師。
financial years 2019-20 and 2020-21 was endorsed by the Committee.

For risk management, the Committee oversaw implementation of HA’s 在風險管理方面，委員會監察醫管局全面推行的機
organisation-wide risk management systems across HA. Specifically, 構風險管理機制，特別是審閱2020年機構主要風
the Committee examined the Key Organisation-wide Risk Report 險報告。報告按各專責委員會審訂的相關職能風險
2020, focusing on the planned mitigation actions for the 10 key risks 報告歸納十個主要風險，委員會集中討論相應的緩
consolidated from functional risk reports reviewed by the concerned 減計劃。年內，委員會亦審議多份特定範疇的風險
functional committees. During the year, the Committee deliberated on 管理報告，包括基本工程、網絡安全、人手短缺、
risk management reports on specific areas, including capital works, 冬季服務高峰期、藥物、漏察 X 光檢查結果的診
cybersecurity, manpower shortage, winter surge, medication, diagnostic 斷風險、電子健康紀錄計劃及臨床公私營協作計
risks of missed radiology imaging findings, Electronic Health Record 劃。委員會亦收閱有關醫管局應急計劃、遵例合規
Programme and Clinical Public-Private Partnership Programmes. The 事宜及處理告發行為的報告。
Committee also received reports on HA’s contingency plans, compliance
with HA related ordinances and handling of whistleblowing cases in HA.

On internal control matters, the Committee received implementation 在內部管控方面，委員會收閱相關建議的實施進度
progress updates respectively on the recommendations of the Corruption 報告，包括廉政公署防止貪污處就醫管局對取覽醫
Prevention Department of the Independent Commission Against 療紀錄及其他病人資料的限制所提出的建議，以及
Corruption (ICAC) on HA’s control of access to medical records and 醫管局成立的專責小組就急症室病人資料安全的
other patient data, and the recommendations of a Special Task Group 建議。
on review of HA’s patient information security at Accident & Emergency
Departments.

Appendices 附錄 131