Source: OJ L, 2024/436, 2.2.2024Consolidated text

Current language: EN

Article 7 Procedures for the preparations for the audit


    1. The audited provider and the auditing organisation shall conclude a written agreement setting out:

      1. the exhaustive list of audited obligations and commitments;

      2. the responsibilities of the audit organisation, including, where applicable, detailed for each legal person constituting the auditing organisation, and the parties empowered to sign the audit report;

      3. the procedures and contact points made available by the audited provider for the auditing organisation to request access to data referred to in Article 5(2);

      4. the timeframe for the audit, including the start and end date of the audit procedures and the completion of the audit report;

      5. a procedure on how disputes between the audited provider and the auditing organisation arising from the performance of the audit shall be resolved.

    1. The agreement referred to in paragraph 1, as well as any other agreements or engagements letters between the auditing organisation and the audited provider related to the performance of the audit, shall be annexed to the audit report.

    1. Where changes are made to the agreement referred to in paragraph 1 during the performance of the audit, they shall be made explicit in the audit report.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod