Quality control

10. The information provided by an ADI under this reporting standard (except for the information required under paragraph 4) must be the product of processes and controls that have been reviewed and tested by the external auditor of the ADI. AGS 1008 ‘Audit Implications of Prudential Reporting Requirements for Authorised Deposit-taking Institutions’, issued by the Auditing and Assurance Standards Board provides guidance on the scope and nature of the review and testing required from external auditors. This review and testing must be done on an annual basis or more frequently if necessary to enable the external auditor to form an opinion on the accuracy and reliability of the data.

11. All information provided by an ADI under this reporting standard must be subject to processes and controls developed by the ADI for the internal review and authorisation of that information. It is the responsibility of the board and senior management of the ADI to ensure that an appropriate set of policies and procedures for the authorisation of data submitted to APRA is in place.