Part 2 of 3: Why ASAE 3402 Assurance Matters
There has been significant commentary across the SMSF administration industry on data feeds particularly around what ‘reliable’ means in the context of SMSF administration, how data feeds differ, and how ASAE 3402 and share registry data fit within broader trust accounting and corporate compliance frameworks.
We’ve put together a three part blog series exploring data feeds. In this article, Part 2 of our Data Feed Series, we examine the benefits of ASAE 3402 Assurance.
What is ASAE 3402 and why is it important?
ASAE 3402 is an Auditing and Assurance Standards Board standard that provides auditors with the assurance that the necessary controls are in place at a service organisation.
For example, Class has achieved ASAE 3402 Type I and Type II certification for its data feeds system making Class Super the only SMSF administration provider to deliver this level of assurance. This provides administrators, auditors, and corporate trustee services with the assurance that Class has controls in place within its data feeds system to manage the security, integrity, and availability of data – and in turn means that auditors can substantially reduce the amount of testing required for balances and transactions maintained by Class.
To further explain this – while data may come through correctly from banks or financial institutions into SMSF software, without a secure and reliable SMSF administration system, such as Class SMSF Administration Software, the data may be prone to duplication, error or be incomplete, the data may be prone to duplication, error or simply be incomplete. It could also potentially be tampered with by anyone who has access to the system, and without traceability. The ASAE 3402 standard ensures robust controls and processes are in place to minimise these risks critical for trust administration and corporate compliance audited by an independent third party on a regular basis.
How does ASAE 3402 allow auditors to rely on data feeds?
While direct-connect data feeds, such as those integrated into Class SMSF Administration Software, are more secure, there can still be occasional data errors. However, having the right controls and processes in place means that those errors can be identified promptly and resolved.
Let’s run through an example:
- A data feed comes through from a financial institution, and is missing some transactions
- The Class systems and data feeds team identifies the issue, contacts the provider and, in line with best practice trust accounting processes, ensures a corrected file is obtained
- Meanwhile, the issue is highlighted in the Class application so the accountant or administrator is aware
- Once the new file is processed, the client can see from the Class application that the issue has been resolved
ASAE 3402 provides the auditor with assurance that despite any intermittent errors, and the rectification steps that have been taken, the final data has within reason been sourced correctly, been processed correctly and hasn’t been tampered with.
Without the ASAE 3402 certification, auditors are professionally bound to be sceptical1 that operational processes work effectively.
“With the ASAE 3402, we are able to do less testing in regards to bank and broker transactions that have been processed via the data feed. For bank transactions and balances, we will no longer need to see the actual bank statements where the transactions and balances have come through on the data feed. Similarly for broker transactions, we will no longer need to see contract notes or broker transaction summaries for trades that have come through on the data feed.
The ASAE 3402 will mean that there is less paperwork for Class customers to provide at the end of each year, and should make our auditing process faster and more streamlined in most cases.”
Joe Buttigieg, Director, Super Know How, Auditors
1 ASA 200, para 15
Read now: Data Feeds – The Facts That Matter. Part 1: Back to Basics
Read now: Data Feeds – The Facts That Matter. Part 3 – Brokers vs Share Registries.
