The Court of Audit publishes three audits on pharmacy, funds, and cybersecurity

The Court of Audit of Galicia (Consello de Contas de Galicia) has made public three new audit reports approved by its Plenary, according to the resolution signed on November 5, 2026, by the chief auditor, Juan Carlos Aladro Fernández. The announcement appears published in the Official Gazette of Galicia (DOG) number 217, Thursday, November 12, 2026, in section III, Other provisions, on page 56740. The works address the pharmaceutical expenditure of the Galician Health Service (SERGAS) for the 2023 financial year, the interterritorial compensation funds of 2024, and the basic cybersecurity controls of the Ferrol City Council in 2024.

The publication responds to the mandate of article 19 of Law 6/1985, of June 24, regulating the Court of Audit of Galicia, which requires the announcement in the official gazette of the Plenary’s agreements regarding the approval and publication of audit reports. The resolution indicates that the agreements were adopted “with dates of September 30 and October 20, 2026,” without specifying which session corresponds to each of the three documents.

Three actions and their files

The announcement identifies each work with its internal action reference, which allows the complete file to be located in the institution’s archives:

• Audit report on the pharmaceutical expenditure of the Galician Health Service, 2023 financial year, with reference [1802024-05].
• Audit report on the interterritorial compensation funds, 2024 financial year, with reference [1502025-01].
• Audit report on basic cybersecurity controls, Ferrol City Council, 2024 financial year, action [1702024-09].

The list therefore covers three very different areas: the pharmaceutical provision of the public health system, the financial leveling mechanisms between administrations, and the protection of information systems of a local administration.

Public health and territorial financing

The first of the reports focuses on the pharmaceutical expenditure of SERGAS during 2023, one of the items with the greatest weight and management complexity in the Galician public health system, both in terms of the prescription bill and the purchasing and dispensing procedures. The second examines the interterritorial compensation funds corresponding to 2024, that is, the resources that the State transfers to the autonomous communities based on leveling criteria and which condition the financing capacity of autonomous public services.

Cybersecurity in a municipality

The third work shifts the focus to local administration: it analyzes the basic cybersecurity controls of the Ferrol City Council in the 2024 financial year, a subject that was incorporated into the audit perimeter as councils assumed the digital management of data and services. The announcement does not detail the specific scope or the conclusions of the works, which must be consulted in the full text.

Where to consult the reports

The resolution refers, to access the full text of the three documents, to the website of the Consello de Contas de Galicia (Court of Audit of Galicia), in the section for auditing reports: https://www.ccontasgalicia.es/gl/menus-consello/fiscalizacion/informes. Furthermore, the institution has recently reinforced its internal procedures with the creation, in September 2026, of the Technical Auditing Commission, a permanent advisory body intended to homogenize methodologies and control the quality of the reports.

The publication of these three audits facilitates public scrutiny of areas that are sensitive for readers: the cost and management of medications funded with public money, the effective arrival of compensation funds, and the level of protection of the data held by administrations. With the announcement in the DOG, the reports are formally available for parliamentary debate, for those affected, and for any citizen who wishes to verify the auditors’ conclusions and recommendations.

Source: Diario Oficial de Galicia, no. 217, November 12, 2026, section III, p. 56740 (official reference: CVE-DOG zxlvyea6-d8y7-51a8-tsw4-snrwjcg8lls4).