APRA has written to ADI auditors requiring them to report on issues covered by APS 310 even though the requirements of APS 310 are broader than the more limited audit coverage indicated under AGS 1008.
APRA also requires auditors to include in their reports under APS 310 paragraph 13, at a minimum, their opinion on the ADI’s compliance with:
• The requirements for notification and consultation with APRA under APS 231 Outsourcing (specifically paragraphs 27 and 29);
• The requirements for notification of APRA under APS 232 Business Continuity Management (specifically paragraph 42); and
• The requirements for informing APRA under APS 520 Fit and Proper (specifically paragraphs 40-43).
