Opens in a new tab
Regulators

Australian National Audit Office

The Commonwealth's auditor is doing its job. It is doing less of it than Parliament asked for.

C

Overall grade

Does its compulsory job completely and well, but its discretionary audit program is at a 25-year low and below what Parliament asked for, what the public sends it is not counted, and its reporting about itself went backwards this year.

The Australian National Audit Office is not a regulator. It cannot fine anyone, cancel a licence or order a department to change course. What it can do is look: at the accounts of every Commonwealth entity, and, at its own discretion, at whether government programs are run well. It reports what it finds to Parliament. That is the whole of its power, and it is a considerable one.

On the part of the job the law makes compulsory, the ANAO delivers. In 2025-26 it completed all 243 mandated audits of Commonwealth financial statements. Its quality frameworks were found to be operating effectively. The parliamentary committee it reports to, the Joint Committee of Public Accounts and Audit, thanked it "for the high quality of its reports and analysis" (ANAO Annual Report 2025-26, p 16).

The problem is the other part.

Fewer audits than Parliament asked for

Performance audits are where the ANAO examines whether money is being spent well: procurement, grants, Defence projects, service delivery. They are discretionary, and they are what gives the prospect of an audit its force.

For most of the last 25 years the ANAO tabled between 44 and 54 performance audits a year. In 2025-26 it tabled 39, against a target of 38 to 42. Leaving aside 2015-16, when a double dissolution stopped reports being tabled, that is the lowest number in the 25 years of annual reports examined.

The ANAO is candid about why. In 2024-25 it cut its target in-year from 48, "the number the Parliament has requested", to 44, and set 38 to 42 for 2025-26 (Annual Report 2024-25, p 4). In 2025-26 it explained that reducing its deficit "required a reduction in the target number of performance audits" (Annual Report 2025-26, p 2). Its corporate plan for 2026-27 commits to "a historically low number of performance audits".

The office has recorded a net deficit in every year since 2018-19. Parliament's committee has been blunter than the office. In March 2025 it said "The current funding model for ANAO is simply not sustainable". In May 2026 it supported an increase of $10.5 million a year as a priority. The 2026-27 Budget statement for the office reads: "The ANAO has no budget measures in the 2026-27 budget." Funding for the performance audit program falls in 2026-27, and staff numbers fall with it (Portfolio Budget Statements 2026-27).

Those are the government's decisions, not the ANAO's. But the ANAO has absorbed the shortfall in the work that reaches furthest. The Defence Major Projects Report, an annual public account of the military's largest acquisitions since 2008, also ended. The parliamentary committee decided to stop requesting it after the Auditor-General, asked for a way forward, advised in December 2025 that it was no longer fit for purpose, citing Defence's growing non-disclosure of information and the cost of the work. When the Senate asked in April 2026 for it to be reinstated, the Auditor-General replied that this would need a request from the committee and would require reductions in the performance audit program.

Agreed is not the same as done

The ANAO's recommendations are almost always accepted: 96% in 2025-26. Entities also tell it they have implemented them: 92% within two years, on their own account.

The ANAO is the only body Regulator Review has examined so far that checks that kind of claim and publishes the answer. Its follow-up audits of selected entities found that 25% of recommendations entities reported as implemented were "partly implemented or not implemented" (Annual Report 2025-26, p 21). That is a valuable finding, and the office deserves credit for it. It also means the 92% headline overstates, by an amount the ANAO has measured in samples, and the ANAO still marks its implementation target as met on the self-reported figure.

A door that is barely open

The law gives a member of the public no right to request an audit, and that is not the ANAO's fault. What is within its control is how it treats what the public sends. Each audit in progress has an online contribution facility. The ANAO's own wording is that contributors "will not automatically receive feedback" and that "contributions are intermittently monitored". In 25 annual reports it has never published how many contributions it receives, or what became of them, and it has never published a count of complaints about itself. State audit offices in Victoria, Queensland, Western Australia and Tasmania, and the UK National Audit Office, count what the public sends them.

Requests from members of Parliament fare little better. In 2017 Andrew Wilkie MP asked the Auditor-General to audit Centrelink's automated debt recovery. The Auditor-General declined to re-examine it, because the Commonwealth Ombudsman had already reported on it, and said the matters would be considered within a proposed broader audit. The scheme, later known as Robodebt, became the subject of a Royal Commission, which reported in July 2023 and found it was not legal. No ANAO audit of the scheme while it operated has been identified, and when the ANAO audited Services Australia's debt management in 2022-23 it excluded the scheme from scope.

Reporting less about itself

By the standards of the bodies reviewed so far, the ANAO is open about its own performance. It publishes targets and results, admits errors, and has a standing Independent Auditor who audits the office itself.

The 2025-26 annual report nonetheless reports less than the year before. For eight years the report carried a table of every audit request from a member of Parliament and what became of it. In 2024-25 there were ten requests, and none led directly to an audit. The 2025-26 report has no table and no count, although the requests are still listed on the ANAO's website. The performance framework has gone from 17 measures to nine, partly by folding several into one. A revised cost method, applied to all three cost measures, reports the missed performance audit cost measure as 2% over target rather than the 6% rise in dollars. A timeliness target missed by more than half, 48% against 100%, has been lowered to 85%.

The grade

Regulator Review grades the ANAO C: adequate. It does its compulsory job completely and well, its reports are respected, and it is more willing than most to measure itself honestly. It is not graded higher because its discretionary audit program is at a 25-year low outside the dissolution year and below what Parliament asked for, because what the public sends it is neither counted nor reported, and because its reporting about itself went backwards this year.

Much of that is a funding story, and the funding is the government's call. Parliament's own committee has said the arrangement threatens "the robustness of the vital audit function" (JCPAA, 12 May 2026). The government has also not responded to that committee's 2022 review of the Auditor-General's governing Act, four and a half years after it was tabled.

The full report, with every source, is available on this site.

How we graded it

Criterion Grade Why
Doing the core job: auditing the Commonwealth's accounts and reporting to Parliament B All 243 mandated financial statements audits completed; quality frameworks found effective; reports praised by the JCPAA. Held back by on-time delivery below target (81% against 85%; performance statements 48% against 100%)
Service to the people it is there for C Parliament's committee is well served, but the program is 9 audits below what Parliament asked for and MPs' requests rarely produce an audit. The public has a contribution facility that is "intermittently monitored", no feedback as of right and no published count
Willingness to use its powers C Hard topics are audited and reported plainly, including integrity bodies. But the funding shortfall has been absorbed by cutting the discretionary program, and an MP's 2017 request to examine Robodebt did not produce an audit
Systemic impact B Whole-of-government audits and lessons products; recommendations agreed at 96%; the only body Regulator Review has reviewed so far that sample-tests whether reported implementation is real. Reach narrowing as output falls
Transparency about itself C Better than most: targets, results, corrections and the implementation test are published. But 2025-26 dropped the parliamentary requests table and the 28-day measure, cut measures from 17 to 9, applied a new cost method that reports a missed result as a smaller miss, and lowered a target after a poor result; the ANAO has never counted public approaches or complaints about itself
Accountability B A standing Independent Auditor, close JCPAA oversight, corrections published, recommendations directed to it implemented. Only one Independent Auditor performance audit since the 2020 budgeting audit (capability, 2022); a second, on financial sustainability, is due late 2026. The FOI exemption and the absence of a government response to Report 491 are not held against it

Blog

  1. “Contributions are intermittently monitored”

    Every performance audit in progress on the ANAO website has a panel inviting the public to contribute. The panel tells you that "you will not automatically receive feedback about your contribution", that "contributions are intermittently monitored", and that you may upload one file of up to 8…

  2. The Robodebt request

    On 26 May 2017 Andrew Wilkie MP wrote to the Auditor-General asking for an audit of Centrelink's automated debt recovery. The reply, dated 27 June 2017, said "I do not intend to re-examine this specific issue", because the Commonwealth Ombudsman had reported on it in April 2017, and that the…

  3. The Senate asked for it back

    On 1 April 2026 the Senate resolved that it "requests the Auditor-General to urgently reinstate" the annual Defence Major Projects Report. The JCPAA had decided in March to stop requesting the report, after the Auditor-General, asked by the Committee's Chair for a way forward, advised in…

  4. The auditor’s auditors

    The ANAO uses private firms for part of its financial statements audit work. In 2025-26 five audit firms were among its largest non-consultancy suppliers: EY ($4.552 million), PwC ($3.754 million), Deloitte ($2.430 million), Crowe ($2.118 million) and KPMG ($1.724 million), GST inclusive….

  5. One in four

    Entities told the ANAO they had implemented 92% of its recommendations within two years. The ANAO's own follow-up audits of selected entities found that a quarter of the recommendations those entities said were implemented were only partly implemented or not implemented at all. The office…

  6. Ninth of twelve

    The Australasian Council of Auditors-General assessed how independent each auditor-general is in 2020 and again in 2025. Australia's ranking fell from seventh to ninth, ahead only of South Australia, Papua New Guinea and the Northern Territory. Its weakest scores were on financial, managerial…

  7. No media releases

    The ANAO "does not do media releases or media briefings on its reports" (ACAG, Independence Report 2025, p 64). For an office whose work matters only if it is noticed, that is a choice worth recording. Regulator Review's inputs for each body include its media releases. For the ANAO there are…

Sources

Sources will be listed here.