Verify information you receive
Verify any requests or claim information you receive with an independent and credible source.
Why this countermeasure matters
Not verifying the information you receive may lead to:
- fraudsters providing false information or evidence to support a request or claim
- fraudsters hiding information that would affect their entitlements
- fraudsters successfully using forged documents to support a request or claim
- difficulties responding to fraud.
How to put this countermeasure in place
Some ways to implement this countermeasure include:
- verifying claim evidence though the Document Verification Service
- requiring a claim to have a valid provider number and then cross-referencing this with a provider register
- verifying claim eligibility by cross-referencing details held by another program or entity
- obtaining corresponding evidence from both a client and provider
- verifying professional qualifications with the education provider
- confirming business details through ABR Explorer.
How to measure this countermeasure's effectiveness
Measure the effectiveness of this countermeasure by using the following methods:
- Confirm the existence of reference and guidance material for manually verifying information.
- Review controls and policies to see if they conform to national guidelines and frameworks.
- Review a sample of completed requests/claims to confirm information was verified on all occasions.
- Undertake pressure testing or a process walk-through to confirm that verification processes cannot be forgotten or ignored.
- Review procedures or guidance to confirm it clearly specifies the requirements for verifying information.
- Identify how verification requirements are communicated to staff, customers and third parties.
- Ask staff about the process requirements to make sure they have a consistent and correct understanding.
- Confirm that someone cannot bypass or manipulate the verification requirements even when pressure or coercion is applied.
- Review the approvals process to find out if the decision-maker confirms that information was verified.
- Review the training staff receive to make sure it includes information about how to verify information.
This type of countermeasure is supported by: