3.1Entity’s obligation

3.1 Entity’s obligation

(1) If an accredited entity is required by a provision of these rules to conduct an assurance assessment or systems testing, the entity must ensure: (a) the process for the assurance assessment or systems testing complies with the requirements of this Chapter; and (b) the elements of the DI data environment that are being assessed or tested meet the requirements of the Act and these rules relevant to the kind of assurance assessment or systems testing being conducted.

Note: Applicants are required to conduct assurance assessments and systems testing for their application for accreditation (see subrule 2.3(3)). Accredited entities are required, in accordance with Chapter 6, to conduct assurance assessments and systems testing for annual reviews.

(2) Each assurance assessment and systems testing must be conducted: (a) having regard to the requirements with which the accredited entity must comply as detailed in the entity’s statement of scope and applicability; and (b) in respect of the entity’s DI data environment, as at the time the assurance assessment or systems testing is conducted.