Verify any requests or claim information you receive with an independent and credible source.
Why this countermeasure matters
Not verifying the information you receive may lead to:
- fraudsters providing false information or evidence to support a request or claim
- fraudsters hiding information that would affect their entitlements
- fraudsters successfully using forged documents to support a request or claim
- difficulties responding to fraud.
How you might apply this countermeasure
Some ways to implement this countermeasure include:
- verifying claim evidence though the Document Verification Service
- requiring a claim to have a valid provider number and then cross-referencing this with a provider register
- verifying claim eligibility by cross-referencing details held by another program or entity
- obtaining corresponding evidence from both a client and provider
- verifying professional qualifications with the education provider
- confirming business details through ABR Explorer.
How to check if your countermeasures are effective
Here are some ways to measure the effectiveness of this type of countermeasure:
- confirm the existence of reference and guidance material for manually verifying information
- review controls and policies to see if they conform to national guidelines and frameworks
- review a sample of completed requests/claims to confirm information was verified on all occasions
- undertake pressure testing or a process walk-through to confirm that verification processes cannot be forgotten or ignored
- review procedures or guidance to confirm it clearly specifies the requirements for verifying information
- identify how verification requirements are communicated to staff, customers and third parties
- ask staff about the process requirements to make sure they have a consistent and correct understanding
- confirm that someone cannot bypass or manipulate the verification requirements even when pressure or coercion is applied
- review the approvals process to find out if the decision-maker confirms that information was verified
- review the training staff receive to make sure it includes information about how to verify information.
This type of countermeasure is supported by: