David Cullinane (Waterford, Sinn Fein) | Oireachtas source

-----as opposed to the regulator getting a copy of the internal audit report as a matter of routine, which should be the case, and seeing for itself if there are problems. If they are flagged up, then there is even more reason for the regulator to have them. They would be in plain sight and the regulator could see them; it would not need any work done by the regulator.

I want to get on to the concerns process. Ms Martin has said there is an online concerns process and a concerns unit. It strikes me that this is based more on individuals, such as whistleblowers or service users who would perhaps highlight concerns, but this is different to actual processes where people go in to do audits and examine the financial controls that might be in place in organisations. Earlier, I asked about an internal or external auditor who sees a problem. Is he or she obliged to report this to the regulator or not, or is the organisation obliged to report this to the regulator? If a problem has been flagged by the auditor to the organisation, is it then obliged to inform the regulator of the problem? Does this happen or are they obliged to do that?