Public sector

Internal audit for public bodies and municipalities

Law 4795/2021 sets out the internal control system of the Greek public sector, with internal audit units and audit committees, and Law 5013/2023 added rules on risk management. We support internal audit units that are short of staff or just starting, with audits and reports, and we help the body's management build the risk register the law expects.

Book a free consultation

Where we help

  • Audit work within the internal audit unit's yearly plan, alongside the unit's own auditors.
  • A draft of the yearly audit plan and of the annual report on the unit's work.
  • For the body's management, a risk register and risk policy as Laws 4795/2021 and 5013/2023 expect, built on COSO ERM.
  • A record of the procedures with fiscal consequences, with the risks and controls in each one, as the Court of Audit asks.
  • Follow-up of the corrective actions agreed after each audit.

Public bodies we have worked with

Since 2024 we have worked with public bodies of many kinds: a municipality, a municipal water utility, a public hospital, a regional health authority, universities, national regulatory and oversight bodies, state-owned companies and regional development bodies. The work covers internal audit, risk management, data protection, human resources and ISO certification support.

We never publish our clients' names.

Reports that say what we found

An internal audit report is only useful if it says what the auditor found. We report findings as they are, including when the answer is negative, and we write them so that the audit committee and the head of the body can act on them.

Who leads the work

Public-sector internal audit is led by Dimitris Papaioannou, CIA, Head of Internal Audit Services. Risk management and data protection work is led by the heads of those services.

Frequently asked questions

Which public bodies does Law 4795/2021 cover?

Law 4795/2021 sets out the internal control system of the public sector, including internal audit units and audit committees. It applies to general government bodies, such as ministries, regions, municipalities, legal entities of public law and public hospitals. The exact duties depend on the size and type of each body.

Can a public body use an external firm for internal audit work?

Yes, within the conditions the law sets. The internal audit unit stays responsible. We carry out the audit work assigned to us and report to the unit and the audit committee.

What does the Court of Audit look for?

Under its decision published in Government Gazette B 4938/2020, the Court of Audit asks for a map of the body's procedures with fiscal consequences, the risks in each procedure and the controls that address them. Our process documentation work produces exactly that.

What is the annual internal audit report?

Each internal audit unit reports on its work over the year: the audits carried out, the findings and whether the corrective actions were taken. We help units prepare it from their audit files.

Is your internal audit unit short of people?

Tell us what the unit needs this year. We will reply with a clear proposal.

Book a free consultation