Document ID: chunk:federal_register_of_legislation:F2025L00107:front:0:p32
Version: federal_register_of_legislation:F2025L00107
Segment Type: other
Provision Reference: 
Character Range: 104972–109255

The entity's process to monitor the system of internal control relevant to the sustainability matters and the preparation of the sustainability information; and

                                                                                                                                                                                                                                                                              2.      The results thereof; and

                                                                                                                                                                                                                                                                       2.       Based on this understanding, evaluate whether the entity's process to monitor the system of internal control relevant to the sustainability matters and the preparation of the sustainability information is appropriate to the entity's circumstances. (Ref: Para. A371R–A376R)

The Information System and Communication

 1.            The practitioner shall obtain an understanding of the entity's information system and communication relevant to the sustainability matters and the preparation of the sustainability information, including: (Ref: Para. A377–A381)

         1.                 The entity's process to identify sustainability information to be reported. (Ref: Para. A382–A384)

         2.                 How information from external sources, such as service organisations or other organisations in the entity's value chain, is recorded, processed, corrected as necessary, and incorporated into the sustainability information. (Ref: Para. A385)

         3.                 For estimates and forward-looking information, how the entity identifies the relevant methods, assumptions or sources of data, and the need for changes in them, that are appropriate in the context of the applicable criteria.

 1.            Based on the practitioner's understanding of the information system and communication in accordance with paragraph 117, the practitioner shall evaluate whether the entity's information system appropriately supports the preparation of the sustainability information in accordance with the applicable criteria. (Ref: Para. A386)

Control Activities

119R. The practitioner shall obtain an understanding of control activities by identifying: (Ref: Para. A387–A392)

 1.                 Controls for which the practitioner plans to obtain evidence by testing their operating effectiveness, which shall include:

         1.                  Controls that address risks for which substantive procedures alone do not provide sufficient appropriate evidence; or

         2.                If applicable, any complementary user entity controls identified in an assurance report of another practitioner that are determined to be relevant to the user entity in accordance with paragraph 52;

 2.                 Based on the controls identified in (a), the IT applications and the other aspects of the entity's IT environment that are subject to risks arising from the use of IT;

 3.                 The entity's general IT controls that address risks arising from the use of IT identified in (b); and

 4.                 Other controls that the practitioner considers are appropriate to identify and assess the risks of material misstatement at the assertion level for disclosures and design further procedures responsive to those assessed risks.

Design and Implementation of Controls

Limited Assurance                                                                                                                                                                                                                                                                   Reasonable Assurance
    120L. If the practitioner plans to obtain evidence by testing the operating effectiveness of controls, the practitioner shall obtain an understanding of: (Ref: Para. A387–A392, A399L)                                                                                             120R. The practitioner shall obtain an understanding of each control identified in accordance with paragraph 119R(a), (c), and (d) by: (Ref: Para. A393–A398)