User Login
Register Lost Password

What you need to monitor

You need to show that you have regularly monitored your compliance procedures and updated them where relevant. We suggest you keep dated notes on file about your compliance monitoring activities.

You may be using an automated system like NIBA’s Compliance Manager to remind you about the timing of these monitoring activities. However, throughout this series of fact sheets we have provided checklists of those things you should include in your compliance activities and regularly check and adjust, where necessary. In particular, you need to keep your eye on those things that may mean you need to fill in the breach register and/or notify ASIC that a breach has occurred.

ASIC has indicated the most common compliance risks you can avoid through regular monitoring are:

  1. Not replacing a key person
  2. Not maintaining the competence of representatives
  3. Not supervising representatives
  4. Not maintaining adequate financial records
  5. Insufficient financial resources to meet licence conditions
  6. Inappropriate handling of client’s money
  7. Not notifying ASIC of a breach
  8. Not providing your services efficiently due to lack of supervision of an outsourced IT contract
  9. Not maintaining an internal dispute resolution procedure and access to an external dispute resolution scheme
  10. Not including adequate information in promotional materials.
  11. Managing Conflicts of Interests.

Your business must be fully compliant with the spirit and letter of the requirements relevant to your licence(s) and authorisations on an ongoing basis. This means you have to:

  • Keep your documented compliance procedures up to date;
  • Regularly monitor how your procedures work in practice;
  • Make changes where problems occur; and
  • Contact ASIC regarding any problems that are defined as notifiable breaches.

You may need to implement new procedures if you find problems and inform ASIC of any systemic breaches.

Use an external consultant to assist to independently review and audit your systems from time to time. Many licensees confirmed to ASIC when applying for their licence that they would use an external consultant annually.

When you do an internal review, keep your review notes on file so that you can show ASIC auditors that you have undertaken regular monitoring and modifications to your procedures. Make sure that you update manuals and documents as you go.

You need to be able to show ASIC that you are managing the risks within your business that may negatively affect consumers using your services or the markets in which you operate.

To maintain compliance with the new regulatory regime you must identify and manage these risks. This will involve taking steps to address them through specific operational procedures and dealing with breaches as they arise.