ESMA Q&A 2839 — Q&A — Annually conducted audit under Commission Delegated [Answer Published]
Financial servicesLevel 3Q&AMARAnsweredOfficial source
Annually conducted audit under Commission Delegated Regulation (EU) 2016/957
Question
Under Article 2(5)(b) of Commission Delegated Regulation (EU) 2016/957 (“RTS on STORs”), should the annually conducted audit of arrangements, systems and procedures be performed by an external auditor, or would an internal audit be sufficient? How should the “internal review” mentioned alongside the audit be understood?
Answer
Commission Delegated Regulation (EU) 2016/957 does not explicitly specify whether the annual audit should be external or internal. Therefore, Persons Professionally Arranging or Executing Transactions (PPAETs) and trading venues may conduct the required annual audit either internally or externally. If it is carried out internally, the audit is expected to be performed by an independent function. It is also worth noting that the reference to an internal review should be understood as a complementary exercise to the audit.
Source: ESMA original document