:
Good morning, once again.
[Translation]
I call this meeting to order.
Welcome to meeting number 127 of the House of Commons Standing Committee on Public Accounts.
[English]
Today's meeting is taking place in a hybrid format, pursuant to the Standing Orders. Members are attending in person. They have the option of using Zoom as well.
Before we begin, I would like to remind members of the new guidelines surrounding the earpieces, which are not hooked up as we begin the meetings. Be sure to keep the earpiece away from the microphone. When you're not using the earpiece, be sure to place it down on the sticker pad—it's usually to your right, but it could be to your left—on the tabletop.
[Translation]
Please keep in mind the following preventative measures in place to protect the health and safety of all participants, including the interpreters.
Pursuant to Standing Order 108(3)(g), the committee is meeting to consider the 2024 reports 5 to 7 of the Auditor General of Canada.
[English]
I'd like to welcome our witnesses today.
From the Office of the Auditor General, we have Karen Hogan, Auditor General of Canada; Andrew Hayes, deputy auditor general; Sami Hannoush, principal; Mathieu Lequain, principal; and Nicholas Swales, principal.
Ms. Hogan, you'll begin with an opening statement of up to five minutes. You have the floor.
:
I appreciate precision around numbers, Mr. Chair, so thank you.
I am pleased to be here today to discuss the three reports that were just tabled in the House of Commons.
I first want to acknowledge that we are gathered in Ottawa on the traditional unceded territory of the Algonquin Anishinabe people.
I will begin with our audit of professional services contracts. It looked at whether federal contracts awarded to McKinsey & Company between 2011 and 2023 complied with applicable policies and provided Canadians with value for money. These contracts spanned 20 federal organizations, including 10 Crown corporations. The total value of contracts awarded to McKinsey & Company during the period we reviewed totalled $209 million, of which about $200 million was spent.
We found that the organizations awarding the contracts showed a frequent disregard for federal contracting and procurement policies and guidance. We also found that each organization's own practices often did not demonstrate value for money. The extent of non-compliance and risk to value for money varied across organizations. For example, in 10 of the 28 contracts awarded through a competitive process, we found that bid evaluations did not include enough information to support the selection of McKinsey & Company as the winning bidder.
[Translation]
We also found that, when it came to non-competitive contracts, organizations often issued these without documenting the required justification for doing so. About 70% of the 97 contracts we looked at were awarded to McKinsey & Company as non-competitive contracts, and their value was approximately $118 million.
When we sampled and reviewed 33 contracts to assess results, we found in more than half that one or more issues prevented organizations from demonstrating that the contracts had delivered value for the money. This included a failure to show why a contract was necessary, no clear statement of what the contract would deliver or no confirmation that the government had received all expected deliverables.
We found that, as the central purchasing and contracting agent and subject matter expert for the Government of Canada, Public Services and Procurement Canada did not challenge organizations when awarding some contracts on their behalf. The department did not challenge the organization requesting the contracts about whether the procurement strategy used was appropriate when multiple contracts were awarded to McKinsey & Company for a similar purpose and within a short period of time.
[English]
While this audit focused on contracts awarded to McKinsey & Company, it highlights basic requirements and good practices that all federal organizations should follow when procuring professional services on behalf of the Government of Canada. Federal contracting and procurement policies exist to ensure fairness, transparency and value for Canadians, but they only work if they are followed.
I will turn now to our audit of Sustainable Development Technology Canada, which looked at whether the foundation managed public funds in accordance with the terms and conditions of contribution agreements and its legislative mandate. We also looked at Innovation, Science and Economic Development Canada's oversight and administration of public funds. Between March 2017 and December 2023, the foundation approved $856 million of funding to 420 projects.
The audit found that there were significant lapses in Sustainable Development Technology Canada's governance and stewardship of public funds. Specifically, the foundation awarded $59 million to 10 projects that did not meet key requirements set out in the contribution agreements between the government and the foundation. These projects were ineligible for funding because, for example, they did not support the development or demonstration of a new technology, or the projected environmental benefits were overstated.
I am also very concerned by breakdowns in the foundation's governance.
[Translation]
The Canada Foundation for Sustainable Development Technology was not always following conflict‑of‑interest policies, and it failed to comply with the Canada Foundation for Sustainable Development Technology Act.
The act requires the foundation to have a group of 15 members, separate from its board of directors, to represent Canadians and appoint most of the foundation’s board. The audit determined that the foundation did not comply with the legislation because it had only two such members, instead of the required 15.
With respect to conflicts of interest, the foundation did not have an effective system to maintain its conflict-of-interest disclosures and related actions. Its own records show that, in 90 cases, conflict-of-interest policies were not followed. These 90 cases were connected to approval decisions that awarded projects nearly $76 million in funding.
Like all organizations funded by Canadian taxpayers, Sustainable Development Technology Canada has a responsibility to conduct its business in a manner that is transparent, accountable and compliant with legislation. Our findings show that when this doesn’t happen, it’s not always clear that funding decisions made on behalf of Canadian taxpayers were appropriate and justified.
Our final audit focused on combatting cybercrime. It looked at whether the Royal Canadian Mounted Police, Communications Security Establishment Canada, the Canadian Radio-television and Telecommunications Commission and Public Safety Canada had the capacity and capability to effectively enforce laws against cybercrime activities and protect Canadians online.
[English]
We found that these organizations have neither the capacity nor the tools to effectively fight cybercrime, as cyber-attacks grow in number and sophistication. Part of the issue is the federal government's siloed and disconnected approach. We found breakdowns in response, coordination, tracking and information sharing between and across the responsible organizations. In addition, given the links between spam and cybercrime, the Canadian Radio-television and Telecommunications Commission's narrow view of its role has limited the extent to which it helps protect Canadians.
Effectively addressing cybercrime relies on incident reports going to the organizations best equipped to receive them and on those organizations acting on those reports. The current system for reporting cybercrime is confusing, and it does not meet the needs of individuals reporting these crimes.
[Translation]
We found that many reports were made to the wrong organizations and that those organizations did not respond to individuals or redirect the reports they received to the appropriate organization.
For example, Communications Security Establishment Canada felt that almost half of the 10,850 reports it received between 2021 and 2023 were out of its mandate because they related to individual Canadians and not to organizations. However, it did not follow up with many individuals to inform them to report their situation to another authority.
[English]
While the RCMP, Communications Security Establishment Canada and Public Safety Canada have discussed implementing a much-needed single point for Canadians to report cybercrime, this has yet to happen.
We also found that the RCMP struggled to staff its cybercrime investigative teams. We estimated that, as of January 2024, close to one-third of positions across all teams were vacant. In our view, having a plan to reduce human resource gaps across all organizations involved in fighting cybercrime, including the RCMP, is an important component of a national cybersecurity strategy.
The take-away from these reports is that when good governance is lacking the remedy isn't necessarily new processes or more people or money. It's about applying the rules that exist and having the right people with the right expertise for the job.
[Translation]
This completes my opening remarks.
We would be happy to answer any questions from committee members.
Thank you for your attention.
:
I will see if Sami wants to jump in.
We were looking at whether or not they had the ability to respond to the quantity of potential reports of cybercrime. There are many parties involved in cybercrime at the federal government level, and then add in that there are other layers of governments, law enforcement and the private sector. There are many people involved in this space.
We were looking at whether they had enough people to respond to the reports that were received. What we found, in many cases, is that thousands of them were not acted on. For example, at Communications Security Establishment, they received almost 11,000—10,600 cases—reports to them of potential cybercrimes. They're an organization that really deals with businesses and critical infrastructure.
When about half of those were from individuals or related to individuals, we would have expected that they would have told those folks that they needed to report this to a different place or pass it along to the organization that could have helped deal with their report. What we found, in almost 2,000 cases, was that the individual never heard back. I would imagine that Canadians are somewhat frustrated and wondering what happened to their potential report.
When it came to capacity, we looked at whether they had enough people. Often what we heard was that they didn't have enough people to deal with all of these claims. In the case of the RCMP, about 30% of their cybercrime investigation team positions are vacant. This is a similar concern that we flagged in previous audits when it comes to the RCMP's staffing and vacant positions.
:
I appreciate that statement because I think it's important for our colleagues. If we want to take this issue seriously, actually deal with this issue seriously, we have to take into consideration that this has been a long-standing issue. There have been consequential, consecutive governments that have done this, and I find it so disingenuous that, oftentimes, particularly my Conservative colleagues always want to paint this picture that it only existed recently.
It doesn't serve Canadians well when we know that consecutive Conservative and Liberal governments, as your report makes very clear, have had rules in place but didn't follow them. They just don't follow the rules. It's convenient that Conservatives continually harp on the fact that it can't be them, but as a matter of fact, the problem is with consecutive governments doing this.
I want to make certain that in our discussion on this report—particularly, Mr. Chair, when we summon this report for investigation, when we table this report so that we summon witnesses—we focus on the true, genuine need to deliver results for Canadians, which are transparency and fairness, and actually recommend solutions that are going to fix this permanently.
To continually use this as an opportunity to make cheap shots at just one government, whereas they also were in government during the time of this audit period, means they have to do some honest reflecting—honest reflecting about making this work. They are harping on me right now because they don't want to actually deal with the fact that they are the ones who did this. They didn't follow the rules, and then the Liberals followed suit and didn't follow the rules.
I find it so difficult in this committee oftentimes. It's just the Bloc and the New Democrats who want transparency here. We're the only ones who actually want to fix this issue. The Conservatives are laughing because they want to make this into a partisan game when, as a matter of fact, this is serious money.
I appreciate the Auditor General for pointing out the fact that these rules have been consistently and flagrantly disregarded by Conservatives and Liberals, and it's important as committee members that we take this issue seriously. I beg their pardon on this because I hope that they can take it more seriously than they have today.
I will turn my attention to the findings of your report, 5.31, the finding related to procurement strategies that “were structured to make it easier for McKinsey & Company to be awarded the contracts”.
How is it possible that the procurement strategies that were undertaken, particularly the policies that create these procurement strategies, were structured or even altered when McKinsey & Company...prior to their bidding on these projects?
:
Out of the 97 contracts that we looked at, six of them appeared to be designed to suit or to favour McKinsey. You can appreciate that, when there are 20 organizations, almost every contract is a uniquely different story, so I'm going to try to keep it somewhat general.
I would tell you that in four of the competitive contracts, we found that there was a change in strategy that made it easier for McKinsey. We're not saying that you can't change your procurement strategy, but you need to really justify why you are changing a strategy to award a contract to a specific vendor.
In two of those cases, we found that the procurement strategy was a competitive one, but that there were questions raised by bidders around the narrowness of certain criteria. We didn't see documentation about how those concerns were addressed. In the end, there was one bidder, and it was McKinsey who received the contract. Those are the cases where it looks like it was done to suit them.
When you look at the national master standing offer, we did find in a couple of cases that two departments waited a little over a year, actually, for the national master standing offer to be available with McKinsey for benchmarking services, when there were other standing offers for benchmarking services that could perhaps have addressed their needs.
Again, it's about documenting why. When you're going to go non-competitive, why are you doing it? I can't underscore enough the importance of making that clear and transparent.
Thank you, Madam Auditor General, again.
I go back to an individual who has been intrinsic to this study, and that is Mr. Dominic Barton. I'm sure you're aware that Mr. Dominic Barton is the former global international leader of McKinsey. Mr. Barton is also the 's hand-picked, appointed ambassador to China. Mr. Barton was also chair of his economic advisory committee, so the infiltration of McKinsey in the Liberal government runs deep—and it doesn't stop there.
To go on, Dominic Barton attested himself, in the government operations committee, that he had dinner with the . We saw the warmly introduce Dominic Barton at an international event. Mr. Barton has also met with Katie Telford as well as Gerald Butts.
As I said, Mr. Dominic Barton, the former international head of McKinsey, is no stranger to the Liberal government. However, on February 1, 2023, Dominic Barton testified, not at this committee but at the government operations committee, and he lied. He lied about attending a strategic meeting with the Canada Infrastructure Bank on June 23, 2020, when he was Canadian ambassador to China. Today it is confirmed in your report that the Canada Infrastructure Bank received not one, not two, but three contracts with McKinsey.
Madam Auditor General, my question to you is this. On what dates were each of these three contracts awarded to McKinsey?
Again, I'd like to thank the Auditor General for being here today with her team to provide these three reports to us.
As is often the case, there are overriding themes in the reports, and I'd like to ask the Auditor General a couple of questions, namely around the conflict of interest rules. That's the one recommendation that you brought forward in the professional services report.
However, I must say, given that the scope of this report was from 2011 to 2023, when I was sitting on this committee in the 42nd Parliament, many of the reports that we were seeing from the Auditor General at the time had to do with, for example, unconscionable delays in delivering service on disability payments. We know what was going on during that time, and it was that there were many cuts to the public service.
I'm wondering what was going on in the public service from that time. Was there a lack of capacity? Was there a lack of guidelines on how to address conflicts of interest and how to provide proper documentation? Was there a lack of oversight? What were some of the causes, do you think, Auditor General, of this problem?
:
These are really big questions spanning 12 years. The public service has changed so much over the course of 12 years.
I would start by telling you that, as an auditor, if you haven't documented something, it didn't happen. It's important, if you're making a judgment call or if there is a potential conflict of interest, that you ensure you're properly documenting decisions, mitigating measures.... It's all about being transparent. I think I would come back to those fundamentals. It's about showing transparency and accountability to Canadians.
I think there's a bigger, broader conflict of interest conversation going on now across the public service. You're right that many of the reports from my office over the last 12 years have noted issues. Most recently, I've done that as well.
In regard to conflicts of interest, you need to worry about real conflicts and also the perception of conflicts of interest. An individual shouldn't be seen to have benefited from public funds. You need to make sure, as a public service, that you set up your personal life and your work life in such a way that they don't interfere. You always need to look unbiased and fair to Canadians. What we found at the Sustainable Development Technology Foundation was really a significant lapse in the management of conflicts of interest.
One recommendation we issued under our professional services contracts was to provide clarity and to be more proactive: to declare if you have a potential conflict of interest when you're part of a committee that is evaluating bids in a competitive process. Competitive processes should be the way to go, and when you do that, you want to make sure there are no biases that are introduced in those evaluations. We believe that relying on the annual declaration for public servants isn't enough. You should be much more proactive.
In fact, we saw certain Crown corporations, especially Export Development Canada, being really good at doing that. That's why we felt the recommendation should be to all in this audit, but I would say, more generally, that everyone in the public service should be thinking and talking about conflicts of interest so that we manage them better.
I appreciate all of you coming in today.
I have just a couple of housekeeping points.
First of all, thank you to you, Auditor General, and to your entire team for kicking us off on another round of studies that we're going to take up as a committee.
For committee members, there will be a meeting this afternoon on the subject of “Report 2: Housing in First Nations Communities” at our regular time of 3:30.
For the OAG, there's been a request for several documents today. I believe we will get them as soon as possible. Those documents will be sent through the clerk and then distributed to members.
On the point from Madame Sinclair-Desgagné, I'm going to reaffirm the discussion and my view as chair, which is reinforced by the House administration. It is that, once these documents are sent to the public, they are deemed to be public documents. You can do with them what you like. I'm going to leave that for members to decide.
You can raise them in the House. You can write about them. You can do whatever you want with them. They are considered by the chair and the House administration to be public documents, unless, of course, the auditor comes forward and requests that a document not be made public. That has not happened today. They'll be sent to you.
Finally, just as a point for the auditor, I want to reiterate that I'm perplexed by this, and I'm sure we'll be coming back to it as a committee: In the report on cybercrime, the Canadian Radio-television and Telecommunications Commission has not validated your audit or seems to question the underpinnings.