I am doing an audit on our deposit operations and learned that our bank does not require documentation for doing file maintenance. File maintenance reports are reviewed by someone who does not perform file maintenance, but how do they know the change was requested by the customer. Does anyone else see an issue with this?

I see an issue with it; but I guess as an auditor, I see issues with most everything.

I agree that there is an issue with this. If the maintenance support documentation is not being reviewed for authorization, then what is the point in the intial review. We review all maintanence and the supporting doucmentation on a daily basis.

I would say that my issue with it would somewhat depend on the type of file maintenance. If they are changing the address to which a deposit account statement is mailed, yes, I would have an issue. If they are changing an industry code, no I wouldn't have an issue.

-Jokerman