Assurance on Capital, Leverage and Liquidity Returns Guideline - Clarifications

Information
Publication type
Adjustments and clarifications
Category
Accounting and Disclosure
Date
Sector
Banks,
Life Insurance and Fraternal Companies,
Property and Casualty Companies,
Trust and Loan Companies
Table of contents

As part of adopting the Basel III reforms and International Financial Reporting Standard 17 in fiscal 2023, we've enhanced and aligned assurance expectations on the capital, leverage and liquidity returns for banks and insurers. For banks, the scope now includes liquidity metrics in addition to capital and leverage metrics. For insurers, the scope now includes an internal audit opinion in addition to the management attestation and external audit opinion.

External audit expectations

An external audit opinion is expected on the numerator and denominator separately instead of the overall ratio. This will prevent offsetting errors that might not be detected otherwise.

The Net Cumulative Cash Flow and Operating Cash Flow Statement don't have an external audit expectation as they're non-public prudential measures for domestic systemically important banks (D-SIBs) and small and medium-sized deposit-taking institutions (SMSBs).

Frequency for category II and III small and medium-sized deposit-taking institutions

Category II and III SMSBs can submit an external audit opinion every 2 years starting in fiscal 2025 within 90 days of fiscal year-end.

For example, an SMSB with a fiscal year-end of December 31, 2025, needs to submit an external audit opinion by March 31, 2026. The SMSB needs to submit the next external audit opinion for fiscal year-end 2027 by March 30, 2028.

Senior management attestation expectations

If the existing attestations or audit opinions align with the scope and frequency of this guideline, the institution can submit the same attestations and audit opinions for the regulatory returns to avoid duplication of effort.

The updated capital quarterly returns for insurers contain:

  • a "Cover" page for existing attestations
  • an "Attestation" page for the senior management attestation and internal audit opinion

Any individual, including an external third party, who is "not directly involved in the preparation of the returns, and (is) with the appropriate authority, knowledge, and expertise to interpret the applicable regulatory guidance" can review the regulatory returns as part of the senior management attestation. The authorized official or chief agent who signs the existing cover page in the capital returns for insurers can also sign off on the senior management attestation page.

Although liquidity returns are filed monthly, the attestation for liquidity returns is expected for the quarter-end month only.

Frequency for category II and III small and medium-sized deposit-taking institutions

Category II and III SMSBs can review and attest quarterly for a fiscal year, every two years starting in fiscal 2024.

For example, an SMSB with a fiscal year-end of December 31, 2024, needs to submit an attestation for the quarter-ending March 31, 2024 and for each quarter remaining in fiscal 2024. The SMSB would need to submit the next attestations quarterly in fiscal 2026.

Internal audit expectations

The assurance expectations now include an internal audit opinion on controls and processes around preparing the regulatory returns. This will enhance confidence and reliance on the returns.

Institutions that don't have an internal audit function can outsource or appoint an independent qualified party to perform the internal audit procedures.

Frequency of submission for domestic systemically important banks and small and medium-sized deposit-taking institutions

Institutions can submit the first internal audit opinion any time between their fiscal 2023 and fiscal 2025 reporting timelines. This means institutions can defer the internal audit opinion to fiscal 2025.

For example:

  • an SMSB with a fiscal year-end of December 31, 2025, needs to submit an internal audit opinion by March 31, 2026
  • a D-SIB with a fiscal year-end of October 31, 2025, needs to submit an internal audit opinion by January 29, 2026

The three-year cycle allows institutions to develop internal audit processes. For example, institutions should base a fiscal 2024 internal audit opinion on the effectiveness of controls in fiscal 2024 only. It must be submitted within 90 days of fiscal 2024 year-end.

Submission expectations

OSFI identification codes

To submit regulatory returns, senior management attestations and internal audit opinions, and external audit opinions, refer to the Reporting Requirements for Deposit-Taking Institutions for OSFI codes under the "Return Title."

To submit unstructured regulatory returns including the senior management attestations and internal audit opinions, and external audit opinions, refer to the following for OSFI codes under the "Return Title":

Upload format

Please submit the senior management attestation or internal audit opinion as an unstructured return after the authorized individual signs the page. Institutions can upload any unstructured return format into the Regulatory Reporting System.

For banks, the return or attestation page can be submitted in any order if the submissions follow each respective deadline. Insurers can submit the attestation page within each unstructured return.