
1. IT-Systems and application controls
The Key Audit Matter How the matter was addressed in our audit
The company is dependent on the IT
infrastructure in the financial reporting.
The Company uses a standard core system
delivered and operated by an external service
provider. Sound governance and control over
the IT systems is critical to ensure accurate,
complete and reliable financial reporting.
Furthermore, the IT systems support regulatory
compliance for financial reporting to authorities,
which is central to licensed businesses.
The system calculates interest rates on
borrowing and lending and the Company's
internal control systems are based on system
generated reports.
Due to the importance of the IT systems for the
Company's operations, the IT environment
supporting the financial reporting process is
considered a key audit matter.
In connection with our audit of the IT-system in
the Company, we have gained an understanding
of the control environment and tested that
selected general IT controls are functioning as
intended and support important application
controls. In our control testing, we have focused
on access management controls.
The independent auditor of the external service
provider has assessed and tested the
effectiveness of internal controls related to the IT
systems outsourced to external service provider.
We have obtained the attestation report (ISAE
3402) from the independent auditor to evaluate
whether the external service provider has
satisfactory internal control in areas of significant
importance to the Company. We have assessed
the independent auditor's competence and
objectivity, as well as evaluated the report in
order to assess possible deviations and
consequences for our audit.
We have requested the independent auditor of
the service provider to test a selection of
standard reports and application controls in the
core-system to assess whether:
o Standard system reports contain all
relevant data, and
o The application controls, including
controls related to interest rate, annuity-
and fee calculations, work as intended.
We have used our IT audit specialist in the work
to understand the control environment, test
controls and examine the reports.
Other Information
The Board of Directors and the Managing Director (management) are responsible for the information
in the Board of Directors’ report. The other information comprises information in the annual report, but
does not include the financial statements and our auditor’s report thereon. Our opinion on the financial
statements does not cover the information in the Board of Directors’ report.
In connection with our audit of the financial statements, our responsibility is to read the Board of
Directors’ report. The purpose is to consider if there is material inconsistency between the Board of
Directors’ report and the financial statements or our knowledge obtained in the audit, or whether the
Board of Directors’ report otherwise appears to be materially misstated. We are required to report if
there is a material misstatement in the Board of Directors’ report. We have nothing to report in this
regard.
Based on our knowledge obtained in the audit, it is our opinion that the Board of Directors’ report
is consistent with the financial statements and
contains the information required by applicable statutory requirements.
Penneo Dokumentnøkkel: 5Y3GY-RQILV-DG4MU-6WDYT-UFNOA-PJ6OO