Internal Audit & Controls

ASIC's CP 391 proposes a revised access model for the companies register, introducing tiered access across general, company, business, and government user categories while restricting sensitive personal details like residential addresses and full dates of birth. Compliance teams at financial institutions should assess how these changes affect due diligence, KYC, and fraud-prevention processes that rely on register data, and consider submitting feedback before the October 12, 2026 deadline.

The UK's Financial Reporting Council (FRC) has found no material issues with how 20 listed companies applied financial instruments accounting requirements, although its examination of their annual reports identified weaknesses in the clarity of certain financial disclosures.

The Belgian Financial Services and Markets Authority (FSMA) will hold its 2026 continuing education for accredited auditors in person in Brussels on November 19 and 24, with separate sessions by entity type. Registration is free but closes October 21, 2026, so audit and compliance teams should confirm attendance now to preserve accreditation standing.

The Belgian Financial Services and Markets Authority (FSMA) will hold two in-person continuing education sessions for certified auditors on November 19 and November 24, 2026, covering occupational retirement institutions and collective investment sectors. Registration is free but must be completed by October 21, 2026, through the FSMA Event app. Audit firms and their compliance teams should confirm attendance plans promptly to meet continuing education obligations.

The UK's Financial Reporting Council (FRC) has fined Deloitte £6.05 million for failures in its audits of Go-Ahead Group, including inadequate scrutiny of two rail subsidiaries that retained more than £30 million in public money owed to the Department for Transport (DfT).

In December 2020, Latch shipped $147,000 worth of hardware to one of its channel partners, but there was a catch. The partner could send all of it back, without consequence, if the building developer behind the order decided not to proceed. That condition was written down, but it simply never made its way to the people doing the accounting. Latch booked the $147,000 as revenue anyway. About six months later, the hardware came back.

The PCAOB publicly released one new inspection report for Deloitte & Touche S.p.A. (Italy) and expanded two previously issued reports for Eide Bailly LLP and Seligson & Giannattasio CPAs PC after the firms failed to remediate identified quality control deficiencies within the 12-month grace period. This action signals the PCAOB's continued enforcement of transparency requirements under Rule 4009(d) and highlights ongoing audit quality concerns at the named firms.