The policy will be reviewed annually at the first Audit Committee meeting of the calendar year.

The bank first learned of the problem when it carried out an internal audit.

I got first hand insight into this when I was doing an audit for a large system which is being used online by millions of people.