ESMA · ESMA_QA_2839 Answer Published
Annually conducted audit under Commission Delegated Regulation (EU) 2016/957
- Regulation
- Market Abuse Regulation (MAR) Regulation (EU) No 596/2014 - Market Intergrity
- Topic
- Prevention and detection of market abuse, including STORs
- Submitted
- 2026-04-30
- Answered
- 2026-05-08
Question
Under Article 2(5)(b) of Commission Delegated Regulation (EU) 2016/957 (“RTS on STORs”), should the annually conducted audit of arrangements, systems and procedures be performed by an external auditor, or would an internal audit be sufficient? How should the “internal review” mentioned alongside the audit be understood?
Answer
Commission Delegated Regulation (EU) 2016/957 does not explicitly specify whether the annual audit should be external or internal. Therefore, Persons Professionally Arranging or Executing Transactions (PPAETs) and trading venues may conduct the required annual audit either internally or externally. If it is carried out internally, the audit is expected to be performed by an independent function. It is also worth noting that the reference to an internal review should be understood as a complementary exercise to the audit.
This Q&A is published by European Securities and Markets Authority and is non-binding. It does not constitute legal advice. Updated weekly from official ESA sources.
Similar Q&As
Review of Security Measures - Auditors expertise
Answered 2018-10-26
Review of the security measures: Audit report
Answered 2018-10-26
Responsibility of national authority with regards to audit reports
Answered 2018-10-26
ICT third-party risk management (DORA)
Answered 2025-11-20
Outsourcing (old CCP question 10 dated 4/06/2013)
Answered 2013-06-04
More Q&As on this topic
📋 Track EU financial regulation continuously
Forseti monitors EU financial regulation and delivers personalised alerts anchored to verified official sources.
14-day free trial. No credit card required.