Source: OJ L, 2024/436, 2.2.2024Consolidated text

Current language: EN

Article 6 Audit report and audit implementation report


Summary What does Article 6 of the Performance of independent audits say?

This article establishes the formal requirements for how audit reports must be produced.

It connects directly to Article 37 of Regulation (EU) 2022/2065, which mandates independent audits, and governs both the audit report and, where relevant, the audit implementation report.

The core principle here is that the auditing organisation must produce the audit report independently, free from any interference by the audited provider, and both report types must follow prescribed templates set out in the Annexes.

Important points:

  • Auditing organisations must produce the audit report without any interference from the audited provider.
  • Draw up the audit report in accordance with the template in Annex I, ensuring it contains detailed and substantiated conclusions across all elements.
  • Where applicable, the audit implementation report must follow the template set out in Annex II.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. The audit report referred to in Article 37(4) of Regulation (EU) 2022/2065 shall be established by the auditing organisation, without interference from the audited provider. That audit report shall be drawn up in accordance with the template in Annex I, and shall contain detailed and substantiated conclusions in relation to all elements of the template.

    1. Where applicable, the audit implementation report referred to in Article 37(6) of Regulation (EU) 2022/2065 shall be drawn up in accordance with the template in Annex II.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod