The federal government's 2025 to 2026 financial statements received an unmodified audit opinion from the Auditor General of Canada. So did the statements of the other 69 federal organizations audited. That result matters because it addresses the fair presentation of financial statements under the applicable accounting framework. It doesn't certify that every important operational control, technology system and board process works well.
The Auditor General's commentary, tabled on November 6, 2026, found weaknesses that deserve attention from anyone responsible for organizational oversight. Among 40 Crown corporation special examinations, 39 corporations had at least one weakness in their risk management procedures and controls. Thirty one had deficiencies affecting board oversight and 23 had weaknesses in measuring, monitoring or reporting on performance. These findings describe that examined group. They can't be projected automatically onto all Crown corporations, let alone every Canadian business.
Some boards lacked the information needed to oversee management and hold the corporation accountable. Delays in appointing directors also constrained effectiveness. A board can meet frequently and receive an impressive collection of reports yet remain unable to establish who owns a significant risk or whether a promised fix has worked. The quality of the information matters more than the size of the meeting package.
Risk management, board oversight and performance reporting are related disciplines. An organization might identify a vulnerability without assigning responsibility for correcting it. Directors might approve a remediation plan without establishing how its success will be independently demonstrated. Managers may report activities completed rather than evidence that harm has been reduced. The Auditor General's findings don't resolve why each of the weaknesses occurred, but they show the recurring difficulty of making accountability measurable.
Technology governance is another concern. For a fourth consecutive year, the Auditor General raised weaknesses in access controls for important federal financial systems. Shared Services Canada had made limited progress and had delayed its corrective timelines. Weaknesses in controlling who can enter or change financial systems increase the possibility of unauthorized changes and make subsequent accountability harder to demonstrate. A clean financial statement audit and outstanding security control problems can both be true.
Federal payroll tells a similar story of partial progress. A backlog of outstanding pay transactions declined from earlier peaks, yet 110,867 transactions remained more than a year old on March 31, 2026. The government had set a goal of eliminating that older backlog by the same date. A planned transition to Dayforce beginning in July 2027 adds complexity when legacy records and unresolved transactions remain in place. Directors should demand evidence that old problems won't migrate unnoticed into a new system.
The findings contain useful contrary evidence. The financial opinions were unmodified, and the payroll backlog was substantially smaller than before. Special examinations take place over time and their findings shouldn't be described as a survey of every corporation at a single point. A responsible board should acknowledge improvement without converting it into proof that unfinished controls have become safe.
For businesses, charities and public institutions, the practical task is to demand reports that distinguish a risk being recognized, a control being designed, its implementation and evidence of successful testing. Directors need to see overdue obligations, their owners and the reasons remediation has stalled. The same discipline helps an organization distinguish a temporary delay from a repeated governance weakness that has become normal.
Financial statements reveal important truths about an organization. The November commentary illustrates why boards must be prepared to read beyond the opinion page, including unresolved findings that remain awkward after the accounts have been signed.
Sources
Office of the Auditor General, Commentary on the 2025 to 2026 Financial Audits. Public Accounts of Canada 2026.