Verify information you receive
Verify request or claim information you receive with an independent and credible source.
Why this countermeasure matters
Not verifying the information you receive may lead to:
- fraudsters providing false information or evidence to support a request or claim
- fraudsters hiding information that would affect their entitlements
- fraudsters successfully using forged documents to support a request or claim
- difficulties responding to fraud.
How to put this countermeasure in place
Some ways to implement this countermeasure include:
- verifying claim evidence though the Document Verification Service
- requiring a claim to have a valid provider number and then cross-referencing this with a provider register
- verifying claim eligibility by cross-referencing details held by another program or entity
- obtaining corresponding evidence from both a client and provider
- verifying professional qualifications with the education provider
- confirming business details through ABR Explorer.
How to measure this countermeasure's effectiveness
Measure the effectiveness of this countermeasure by using the following methods:
- Confirm the existence of reference and guidance material for manually verifying information.
- Review controls and policies to see if they conform to national guidelines and frameworks.
- Review a sample of completed requests/claims to confirm information was verified on all occasions.
- Undertake pressure testing or a process walk-through to confirm that verification processes cannot be forgotten or ignored.
- Review procedures or guidance to confirm it clearly specifies the requirements for verifying information.
- Identify how verification requirements are communicated to staff, customers and third parties.
- Ask staff about the process requirements to make sure they have a consistent and correct understanding.
- Confirm that someone cannot bypass or manipulate the verification requirements even when pressure or coercion is applied.
- Review the approvals process to find out if the decision-maker confirms that information was verified.
- Review the training staff receive to make sure it includes information about how to verify information.
This type of countermeasure is supported by: