Thank you, Chair. So, yes, it's coming up to nearly eight months, actually, at the end of the month, and it's been a busy first few months. I have been clear that, in this role, it's a new phase for the Act and for the commissioner's office with a new commissioner in place. So, I've been busy putting a plan in place, which I will launch in the middle of November, and I'll perhaps come onto some of the detail of that throughout the course of the conversations today.
I guess, I come into the organisation with some experience, with 12 years of running a third sector organisation and running the governance and finances of an organisation. And my first impressions have been very positive about the way the organisation is run, the systems and processes that are in place and the policies that are in place. I've been able to get that assurance from others as well. We have a programme of internal audit reviews, which has given me strong assurance about some of our processes, and that's an ongoing programme of internal audit that we have. As you'll have seen, we've just had a clean audit report—actually, a complimentary audit report from the Auditor General for Wales's office—about our accounts for last year. I also have a very strong audit and risk assurance committee in place. The membership is actually changing, because some of them are coming to the end of their term, but they provide robust challenge and advice to the work of the organisation.
So, I think the organisation is in a good place and I'm confident about the way it is run, but, nonetheless, I think, coming into an organisation, there's an opportunity to bring some fresh eyes to the way an organisation is run and bring some of my experience from my previous job to understand how we can continually improve how we do things within the organisation. That's what I've been doing over the last seven and a half months or so. So, for example, we have done some strengthening of some of our policies and systems—our procurement processes, for example. I've reviewed the policy and that's been strengthened in the last few months. We've done a lot of work, led by Marie, on our cyber security, and so we have IASME level 2 cyber security level, which we didn't have previously, which gives us assurance in that regard.
In other areas, we put a new set of values in place, just agreed for the organisation, so we have a coherent set of values about how we're going to operate. One of the values is about being open and trying to be more transparent about how we are as an organisation when we do things and how we do things. So, we will be publishing the minutes of the assurance part of our risk and audit committee, so people can see what's being discussed and the discussions that are being had. And we publish, for example, the gifts register. I think we're only obliged to do it for Marie and me, but we do it for the whole organisation. So, that's part of the approach I'd like to take to be more open and transparent. In summary, I think the organisation I inherited is in good shape, but there's always room for improvement, and we're looking to continue to do that over the years ahead.