The design of fully integrated internal control systems in public government: reflections from the case of Regione Lombardia
Abstract
The design of internal control functions in Italian governments has been strongly influenced by the legislation that has driven a fragmentation of control activities. Over the years, such an approach has prevented the development of a complete internal control and risk management system.
Furthermore, the absence of a sound organizational model feeds the lack of structured processes of risk management and control, the lack of an integrated information system, and problems of coordination with the multi-layered system of external controls.
This article proposes a framework for the re-design of the internal control system in governments within the perspective of fully integration of administrative processes, information, and risk management. This is done by utilizing the insights provided by the empirical verification of the three lines of defense model conducted at the regional government of Lombardy in Italy.
Keywords: Internal control systems, Public government, Regional government, Risk management, Information systems
