In this act Article 9 of 18
Article 9 — Audit risks analysis
Digital & dataLevel 2Delegated RegulationDSAIn forceOfficial source
9(1)Copy link
1.The audit report shall include a substantiated audit risk analysis performed by the auditing organisation for the assessment of the audited provider’s compliance with each audited obligation or commitment.
9(2)Copy link
2.The audit risk analysis shall be carried out prior to the performance of audit procedures and shall be updated during the performance of the audit, in the light of any new audit evidence which, according to the professional judgement of the auditing organisation, materially modifies the assessment of the audit risk.
9(4)(a)
(a)the nature of the audited service and the societal and economic context in which the audited service is operated, including probability and severity of exposure to crisis situations and unexpected events;
Copy link9(4)(c)(i)
(i)where applicable, information from previous audits to which the audited service was subjected;
Copy link9(4)(c)(ii)
(ii)where applicable, information from reports issued by the European Board for Digital Services or guidance from the Commission, including guidelines issued pursuant to Article 35(2) and (3) of Regulation (EU) 2022/2065, and any other relevant guidance issued by the Commission with respect to the application of Regulation (EU) 2022/2065;
Copy link9(4)(c)(iii)
(iii)where applicable, information from audit reports published pursuant to Article 42(4) of Regulation (EU) 2022/2065 by other providers of very large online platforms or of very large online search engines operating in similar conditions or providing similar services to the audited service.
Copy link