Skip to content
BOL Conferences
Thread Options
#1301870 - 12/09/09 05:31 PM Can we allow thrid party auditors to review SAR's?
Compliance Nut Offline
Member
Joined: Mar 2007
Posts: 88
Our BSA Officer is concerned about providing SAR's to the third party auditors we have hired to do our BSA Audit.

Is anyone aware of citings I can rely on for either allowing them to review the SAR's are not allow them access to SAR's?

Return to Top
BSA/AML/CIP/OFAC Forum
#1301945 - 12/09/09 06:41 PM Re: Can we allow thrid party auditors to review SAR's? Compliance Nut
Auditor247 Offline
100 Club
Auditor247
Joined: Jun 2006
Posts: 140
The FFIEC Manual section on the BSA/AML Compliance Program-Overview includes a section on independent testing which would support the need to provide the third party auditors with documentation of your compliance with suspicious activity reporting. It lists what independent testing should include.

Return to Top
#1301952 - 12/09/09 06:48 PM Re: Can we allow thrid party auditors to review SAR's? Auditor247
Doug Hendrickson Offline
Power Poster
Doug Hendrickson
Joined: Oct 2009
Posts: 3,927
I can understand that the FFIEC manual section might support an internal auditor's ability to have access to specific SARs for review, but I would question if that extends to third-party service providers (either the regular auditors or those specifically employed to review BSA). Everything I read implies that there is very little ability to share any of the SAR details.
_________________________
I hear and I forget. I see and I remember. I do and I understand.--Confucius

Return to Top
#1301975 - 12/09/09 07:02 PM Re: Can we allow thrid party auditors to review SAR's? Doug Hendrickson
Auditor247 Offline
100 Club
Auditor247
Joined: Jun 2006
Posts: 140
The independent testing section indicates independent testing (audit) should be conducted by the internal audit department, outside auditors, consultants or other qualified independent parties. It would be difficult for an auditor to determine if there is a weakness in suspicious activity monitoring and subsequent reporting if they were unable to review the documentation.

Return to Top
#1301976 - 12/09/09 07:02 PM Re: Can we allow thrid party auditors to review SAR's? Doug Hendrickson
Kathleen O. Blanchard Offline

10K Club
Kathleen O. Blanchard
Joined: Dec 2000
Posts: 21,293
I review SARs at bank's all of the time as a third party auditor. It is expected. How else could I comment on adequacy of narrative, proper completion, etc.? The party conducting the independent testing is acting on behalf of the bank and needs access to all bank data. We do not retain copies of SARs, just make notes. No access to SAR data would impair the quality of the audit.
_________________________
Kathleen O. Blanchard, CRCM "Kaybee"
HMDA/CRA Training/Consulting/Mapping
The HMDA Academy
www.kaybeescomplianceinsights.com

Return to Top
#1302187 - 12/09/09 09:42 PM Re: Can we allow thrid party auditors to review SAR's? Kathleen O. Blanchard
P*Q Offline

Power Poster
P*Q
Joined: May 2001
Posts: 8,458
Somewhere
Absolutely they can.

Return to Top
#1302327 - 12/10/09 02:38 AM Re: Can we allow thrid party auditors to review SAR's? P*Q
rlcarey Offline
10K Club
rlcarey
Joined: Jul 2001
Posts: 83,396
Galveston, TX
Ditto - I do as MS KayBee does all the time.
_________________________
The opinions expressed here should not be construed to be those of my employer: PPDocs.com

Return to Top
#1302888 - 12/10/09 06:32 PM Re: Can we allow thrid party auditors to review SAR's? rlcarey
Aggs Offline
Diamond Poster
Aggs
Joined: Nov 2009
Posts: 1,331
Hoosier Country
This is a little late, but I agree with giving auditors/consultants access to the reports - when I was the BSA officer I always provided SAR copies to our auditors for review. We outsourced our internal audit function to a consulting firm and I gave them access to all information. I don't know how else we could have gotten through a BSA audit...
_________________________
CRCM + CAMS = certified compliance nerd

Opinions expressed in these threads are my own and not my employer's.

Return to Top

Moderator:  Andy_Z