Authorisation

9. The information provided by an insurer under this reporting standard must be subject to processes and controls developed by the insurer for the internal review and authorisation of that information. It is the responsibility of the board and senior management of the insurer to ensure that an appropriate set of policies and procedures for the authorisation of data submitted to APRA is in place.

10. If an insurer submits information under this reporting standard using the ‘Direct to APRA’ software, it will be necessary for an officer of the insurer to digitally sign, authorise and encrypt the relevant data. For this purpose, APRA’s certificate authority will issue ‘digital certificates’, for use with the software, to officers of the insurer who have authority from the insurer to transmit the data to APRA.

11. If information under this reporting standard is provided in paper form, it must be signed on the front page of the relevant completed form by either:

(a) the Principal Executive Officer of the insurer; or

(b) the Chief Financial Officer of the insurer (whatever his or her official title may be).