Rule · BCB · 27 May 2021 · Resolução CMN 4910

CMN Resolution No. 4,910 — Provisions on the Provision of Independent Audit Services for Financial Institutions and Other Institutions Authorized by the Central Bank of Brazil

In force from 1 Jan 2022Applies to: All regulated firms

CMN Resolution No. 4,910 mandates that financial institutions and other entities authorized by the Central Bank of Brazil must have their annual, semi-annual, and interim financial statements audited by independent auditors registered with the Securities and Exchange Commission. The regulation prohibits the engagement of auditors where independence is compromised by financial interests, management roles, or significant fee dependencies, and requires the periodic rotation of audit team members every five years with a mandatory three-year cooling-off period. Institutions meeting specific criteria, such as being publicly traded companies or leaders of prudential conglomerates, must establish a statutory Audit Committee responsible for overseeing financial reporting, internal controls, and the independence of both independent and internal auditors.

BrazilBanco Central do Brasil
Annotations and obligations
133 obligations · 17 permissions · 48 definitions
  • Obligation 133
  • Permission 17
  • Definition / condition 48
  • background, boilerplate

Lineage: Amended

A newer document in RegAlert amends this one; it applies as amended.

Lei n.º 4.595, de 31 de dezembrode 1964 — dispõe sobre a política…1964 · BR-LAWLei n.º 4.595, de 31 de dezembro de 1964 — dispõe sobre a política e as instituições monetárias, bancárias e creditícias (establishes the National Financial System and the Banco Central do Brasil) (1964-12-31)Resolution CMN No. 3198 — Amendsand Consolidates Regulations on I…2004 · BCBResolution CMN No. 3198 — Amends and Consolidates Regulations on Independent Audit Services for Financial Institutions, Authorized Institutions, and Clearing and Settlement Service Providers (2004-05-27)CMN Resolution No. 4434 —Constitution, Authorization, Oper…2015 · BCBCMN Resolution No. 4434 — Constitution, Authorization, Operation, Statutory Amendments, and Cancellation of Credit Cooperatives (2015-08-05)Resolution No. 3416 dated2006-10-24Not in RegAlertResolution No. 3416 dated 2006-10-24 — Not in RegAlertResolution No. 3606 dated2008-09-11Not in RegAlertResolution No. 3606 dated 2008-09-11 — Not in RegAlertResolution No. 3771 dated2009-08-26Not in RegAlertResolution No. 3771 dated 2009-08-26 — Not in RegAlertResolution No. 4329 dated2014-04-25Not in RegAlertResolution No. 4329 dated 2014-04-25 — Not in RegAlertMentions (5)documents this one mentionsopen the list below the graph ▾Mentions (5): documents this one mentions without changing it — open the list below the graphCMN Resolution No. 4,910 —Provisions on the Provision o…2021-05-27 · this documentCMN Resolution No. 4,910 — Provisions on the Provision of Independent Audit Services for Financial Institutions and Other Institutions Authorized by the Central Bank of Brazil (2021-05-27)CMN Resolution No. 5,067 of April20, 2023, Amending CMN Resolution…2023 · BCBCMN Resolution No. 5,067 of April 20, 2023, Amending CMN Resolution No. 4,910 of May 27, 2021, Regarding Independent Audit Services for Financial Institutions (2023-04-20)Resolution CMN No. 5116 –Amendments to multiple resolution…2024 · BCBResolution CMN No. 5116 – Amendments to multiple resolutions to exclude securities brokerages, securities distributors and foreign‑exchange brokerages from their scope (2024-01-25)Mentions (1)a document that mentions itopen the list below the graph ▾Mentions (1): a document that mentions it without changing it — open the list below the graph
amendssupersedesissued underrefers todashed card: not in RegAlert (or proposed)arrows run from the older text to the one that changes it
The links and the sentences they come from (9)
Supersedes
Amended by
Issued under
Mentions (6): 5 documents this one mentions and 1 document that mentions it, without changing it

What changed in the obligations

Against Resolution CMN No. 3198 — Amends and Consolidates Regulations on Independent Audit Services for Financial Institutions, Authorized Institutions, and Clearing and Settlement Service Providers (2004-05-27)

38 new obligations · 1 amount or limit changed · 2 deadlines changed · 15 changes of scope · 8 changes of who is bound · 11 not carried over

60 obligations are the same in both texts.

Changed (26)
  • Scope
    Before
    Article 6. The hiring and maintenance of an independent auditor by the institutions, clearing houses, and service providers referred to in Article 1 are prohibited if any of the following situations are established: II - direct or indirect shareholding by the independent auditor, technical manager, director, manager, supervisor, or any other member with managerial functions in the team involved i…
    Now
    Article 1 are prohibited if any of the following situations are established: II - direct or indirect participation, by the independent auditor, technical manager, director, manager, supervisor, or any other member, with management functions, of the team involved in the audit work, in the capital of the audited institution, its holding company, or its affiliates, subsidiaries, or jointly controlle…
  • Scope
    Before
    Article 6. The hiring and maintenance of an independent auditor by the institutions, clearing houses, and service providers referred to in Article 1 are prohibited if any of the following situations are established: III - existence of active or passive operations with the audited entity or its affiliates, including through investment funds administered by them, of responsibility or with guarantee…
    Now
    Article 1 are prohibited if any of the following situations are established: III - existence of active or passive operations contracted with the audited institution, its holding company, or its affiliates, subsidiaries, or jointly controlled entities, including through investment funds managed by them, of responsibility or with guarantee of the independent auditor, technical manager, director, ma…
  • Deadline
    Before
    Article 6. The hiring and maintenance of an independent auditor by the institutions, clearing houses, and service providers referred to in Article 1 are prohibited if any of the following situations are established: IV - participation of the technical manager, director, manager, supervisor, or any other member with managerial functions of the independent auditor replaced in accordance with Articl…
    Now
    Article 1 are prohibited if any of the following situations are established: IV - participation of technical manager, director, manager, supervisor, or any other member, with management functions, in the audit work of a successor firm, within a period shorter than that provided in Article 7; and
  • Who is bound
    Before
    Article 6. The hiring and maintenance of an independent auditor by the institutions, clearing houses, and service providers referred to in Article 1 are prohibited if any of the following situations are established: V - payment of fees and reimbursement of expenses of the independent auditor, related to the base year of the financial statements subject to audit, by the audited entity, individuall…
    Now
    Article 1 are prohibited if any of the following situations are established: V - payment of fees and reimbursement of expenses of the independent auditor, related to the base year of the financial statements subject to audit, by the audited institution, alone, or together with its holding company or its affiliates, subsidiaries, or jointly controlled entities, with representativeness equal to or …
  • Scope
    Before
    Article 6. The hiring and maintenance of an independent auditor by the institutions, clearing houses, and service providers referred to in Article 1 are prohibited if any of the following situations are established: § 2. The prohibition provided for in item III does not apply to credit and leasing operations with an original term equal to or greater than two years, carried out prior to the hiring…
    Now
    § 3. The prohibition referred to in the main text regarding item III does not apply to credit operations conducted under conditions compatible with market conditions, including regarding limits, interest rates, grace periods, terms, required guarantees, and criteria for risk classification for the purpose of establishing provisions for losses and writing off as losses, without additional or d…
  • Who is bound
    Before
    Article 9. The institutions, clearing houses, and service providers referred to in Article 1 must proceed to the substitution of the contracted independent auditor, at the latest, after opinions have been issued regarding five complete social fiscal years.
    Now
    Article 1 must proceed to the substitution of the technical manager, director, manager, supervisor, and any other member, with management functions, of the team involved in the audit work, after reports have been issued regarding five complete and consecutive social years.
  • Who is bound
    Before
    must constitute a statutory body called an audit committee.
    Now
    Article 8. Institutions must constitute a statutory body named "audit committee" financial institutions and other institutions authorized to operate by the Central Bank of Brazil that: I - are registered as publicly traded companies;
  • Scope
    Before
    I - in institutions with shares traded on an exchange: a) not be, or have been in the last twelve months: 1. director of the institution or its affiliates;
    Now
    I - not be and not have been in the last twelve months: a) director of the institution, its holding company, or its affiliates, subsidiaries, or jointly controlled entities, directly or indirectly;
  • Scope
    Before
    I - in institutions with shares traded on an exchange: a) not be, or have been in the last twelve months: 2. employee of the institution or its affiliates;
    Now
    I - not be and not have been in the last twelve months: b) employee of the institution, its holding company, or its affiliates, subsidiaries, or jointly controlled entities, directly or indirectly;
  • Scope
    Before
    I - in institutions with shares traded on an exchange: a) not be, or have been in the last twelve months: 4. member of the statutory audit committee of the institution or its affiliates;
    Now
    I - not be and not have been in the last twelve months: d) member of the statutory audit council of the institution, its holding company, or its affiliates, subsidiaries, or jointly controlled entities, directly or indirectly;
  • Scope
    Before
    I - in institutions with shares traded on an exchange: c) not receive any other type of remuneration from the institution or its affiliates other than that related to their function as a member of the audit committee;
    Now
    Article 9. The audit committee must be composed of at least three members, who must observe, in addition to the conditions for holding positions in statutory bodies of institutions authorized to operate by the Central Bank of Brazil, according to specific regulations, the following conditions: III - not receive any other type of remuneration from the institution, its holding company, or its affil…
  • Amount or limit
    Before
    II - in privately held institutions: a) that the members of the audit committee are also directors of the institution, with at least one year of actual exercise in the position, with the participation of, at most, three more members who meet the provisions of item I and § 1;
    Now
    Article 1 that are not registered as publicly traded companies and whose control is not held by the Union, the States, or the Federal District, it is permitted that members of the audit committee are also directors of the institution, provided that these constitute less than half of the total members of the committee.
  • Scope
    Before
    I - a single audit committee composed, in addition to, at least, three directors of the leading institution, by at least three more members who meet the provisions of Article 13, item I and § 1; or
    Now
    I - constitution of a single committee for the prudential conglomerate composed exclusively of members who meet the provisions of the main text; or
  • Scope
    Before
    Article 13. In addition to the provisions of Resolution No. 3,041 of November 28, 2002, which establishes conditions for the exercise of positions in statutory bodies of financial institutions and other institutions authorized to operate by the Central Bank of Brazil, the basic conditions for the e… § 2. If a member of the audit committee of the institution is also a member of the board of direct…
    Now
    § 5. If a member of the audit committee is also a member of the executive management or the board of directors of the institution, its holding company, or its affiliates, subsidiaries, or jointly controlled entities, directly or indirectly, the option to receive remuneration for one of the positions is permitted.
  • Scope
    Before
    Article 12. The audit committee must be composed of at least three members, observing that the maximum term must be five years for institutions with shares traded on a securities exchange and no fixed term for those with closed capital.
    Now
    Article 10. The term of office of the members of the audit committee must be up to five years.
  • Who is bound
    Before
    II - recommend, to the administration of the institution, the entity to be hired for the provision of independent audit services, as well as the replacement of the provider of these services, if deemed necessary;
    Now
    Article 11. The duties of the audit committee include: II - recommend to the board of directors or, in its absence, to the executive management, the entity to be engaged to provide independent audit services, as well as its remuneration, and the replacement of the provider of these services, if deemed necessary;
  • Scope
    Before
    III - review, prior to publication, the semi-annual financial statements, including explanatory notes, management reports, and the independent auditor's opinion;
    Now
    Article 11. The duties of the audit committee include: III - review, prior to disclosure or publication, the individual and consolidated financial statements, annual and semi-annual, including explanatory notes, the management report, and the independent auditor's report;
  • Who is bound
    Before
    Article 17. The audit committee must prepare, at the end of the semesters ending on June 30 and December 31, a document called the audit committee report containing, at minimum, the following information: § 2. The audit committee must publish, together with the semi-annual financial statements, a summary of the audit committee report, evidencing the main information contained in that document.
    Now
    Article 15. The audit committee must prepare, for the financial statements relating to the periods ending on June 30 and December 31, a report containing, at minimum, the following information: § 2. Institutions must disclose, together with their individual and consolidated financial statements, semi-annual and annual, a summary of the audit committee report, evidencing the main information conta…
  • Scope
    Before
    § 1. The number of members, criteria for appointment, dismissal, and remuneration, term of office, and duties of the audit committee must be expressly stated in the institution's bylaws or articles of incorporation.
    Now
    § 1. The number of members of the audit committee and the criteria for appointment and dismissal of its members must be expressed in the statute or articles of association of the institution.
  • Deadline
    Before
    § 2. The formality provided for in the caput must be renewed with a frequency not exceeding five years, counted from the date of the last qualification.
    Now
    I - approval in a new certification exam provided for in § 1º within a period not exceeding three years from the last approval; or
  • Scope
    Before
    Art. 21. The independent auditor must prepare, as a result of the audit work performed on the institutions, clearing houses, and service providers referred to in Art. 1, the following reports: II - report on the evaluation of the quality and adequacy of the internal control system, including electronic data processing systems and risk management systems, evidencing the identified deficiencies;
    Now
    b) report on the internal control system, including electronic data processing systems and risk management systems, which have, or may come to have, relevant impacts on the financial statements or on the operations of the audited institution, evidencing the identified deficiencies; and
  • Who is bound
    Before
    Art. 21. The independent auditor must prepare, as a result of the audit work performed on the institutions, clearing houses, and service providers referred to in Art. 1, the following reports: § 2. The audited entities, as well as their respective independent auditors, must keep at the disposal of the Central Bank of Brazil, for a minimum period of five years, or for a longer period in the event …
    Now
    § 4º The reports mentioned in item II of the caput, as well as the audit documentation, must be available to the Central Bank of Brazil for at least five years or for a longer period due to an express determination by this Autarchy.
  • Who is bound
    Before
    Article 3. The institutions, clearing houses, and service providers referred to in Article 1 must provide the independent auditor with all data, information, and conditions necessary for the effective performance of their services, as well as the management letter of responsibility, in accordance with the standards of the Federal Council of Accountancy (CFC).
    Now
    Art. 22. The institutions mentioned in Art. 1 must provide the independent auditor with the formal representation of management, in accordance with the audit standards defined by the Federal Council of Accounting, as well as the data, information, and conditions necessary for the effective provision of audit services.
  • Who is bound
    Before
    Art. 24. The board of directors of the institution, clearing house, or service provider must formally notify the independent auditor and the audit committee, when installed, within a maximum period of 24 hours from identification, of the occurrence of the events referred to in Art. 23.
    Now
    Art. 24. The management of the institutions mentioned in Art. 1 must formally notify the independent auditor and the audit committee, when installed, within a maximum period of twenty-four hours from identification, of the existence or suspicion of the occurrence of the situations mentioned in Art. 13.
  • Scope
    Before
    § 1. In institutions that do not have an audit committee constituted in accordance with this regulation, as well as in clearing houses and service providers, the director must also answer for the monitoring, supervision, and compliance with the standards and procedures for independent audit provided for in the current regulation.
    Now
    Art. 25. Institutions that do not have an audit committee constituted in accordance with this Resolution must designate to the Central Bank of Brazil a director responsible for complying with the norms and procedures for independent audit provided for in current regulation.
  • Scope
    Before
    Art. 27. The independent auditor, in addition to the provisions of this regulation, must observe the standards, regulations, and procedures of the CVM, CFC, and Ibracon regarding: V - continuing education program, including provision for specific activities related to independent audit in financial institutions.
    Now
    V - continuing education program, including provisions for specific activities related to independent audit in institutions authorized to operate by the Central Bank of Brazil.
New in this text (38)
  • Article 2. The financial statements, including explanatory notes, individual and consolidated, annual, semi-annual, and interim, disclosed or published by the institutions mentioned in Article
  • The financial statements listed in the main text are exempt from the audit referred to in the main text: I - those of microentrepreneur credit societies and small business lending companies;
  • The financial statements listed in the main text are exempt from the audit referred to in the main text: II - those of capital and loan credit cooperatives; and
  • The financial statements listed in the main text are exempt from the audit referred to in the main text: III - those of singular credit cooperatives relative to the base date of June 30.
  • Article 7. The institutions mentioned in Article 1 must observe a minimum interval of three complete social years for the return of the technical manager, director, manager, supervisor, or any other member, with management functions, of the team involved in the audit work, counted from the date of substitution.
  • III - meet the criteria provided in specific regulations for classification in S1, S2, and S3.
  • § 2. The audit committee of the institutions mentioned in the main text, item II, and § 1 is responsible for compliance with the duties and responsibilities provided in this
  • Central Bank of Brazil that are part of the prudential conglomerate.
  • § 3. The provisions of § 2 do not apply to institutions of the prudential conglomerate or the credit cooperative system that, voluntarily or by virtue of legal, regulatory, statutory, or contractual provisions, constitute an audit committee in the manner provided in this Resolution.
  • Article 9. The audit committee must be composed of at least three members, who must observe, in addition to the conditions for holding positions in statutory bodies of institutions authorized to operate by the Central Bank of Brazil, according to specific regulations, the following conditions: IV - not hold positions, especially in advisory boards, boards of directors, or statutory audit councils…
  • Article 1 registered as publicly traded companies and in institutions whose control is held by the Union, the States, or the Federal District, at least one of the members of the audit committee must be a member of the board of directors who does not participate in the executive management.
  • § 2. Up to one-third of the members of the audit committee may have their term renewed, respecting the maximum period of stay of up to ten consecutive years, exempt from the interval provided in § 4.
  • § 3. Regardless of the term of office, under no circumstances will the stay of a member in the audit committee be admitted for a period exceeding:
  • I - ten consecutive years, for up to one third of the members; and
  • II - five consecutive years for the remaining members.
  • Article 11. The duties of the audit committee include: X - monitor and evaluate the independence of the independent auditor; and
  • Article 15. The audit committee must prepare, for the financial statements relating to the periods ending on June 30 and December 31, a report containing, at minimum, the following information: III - description of other services provided by the independent auditor, or by a network firm, for the institution during the base year of the financial statements subject to audit and the two preceding ye…
  • Article 15. The audit committee must prepare, for the financial statements relating to the periods ending on June 30 and December 31, a report containing, at minimum, the following information: IV - description of situations in which there are significant divergences between the administration of the company, the independent auditors, and the audit committee, regarding the financial statements of…
  • § 2º The maintenance of the qualification must be proven by:
  • II - the exercise of independent audit activity in institutions mentioned in Art. 1, together with participation in a continuing professional education program that has, at a minimum, the following characteristics: a) minimum workload of one hundred and twenty hours in each three-year period, counting all courses eligible for the period, observing an annual workload of at least twenty hours; and
  • II - the exercise of independent audit activity in institutions mentioned in Art. 1, together with participation in a continuing professional education program that has, at a minimum, the following characteristics: b) predominance of topics related to operations carried out within the financial system or to activities applicable to independent audit work.
  • § 3º If the auditor ceases to exercise independent audit activities in the institutions mentioned in Art. 1 for a period exceeding one year, the return to the functions of technical manager, director, manager, supervisor, or other management role within the team involved in the audit work is conditioned:
  • I - in cases of absence for a period less than three years: a) to new approval in a certification exam provided for in § 1º; or
  • I - in cases of absence for a period less than three years: b) to compliance with continuing education requirements, with a minimum workload of two hundred and forty hours in the triennium immediately following their return, observing participation in at least forty hours per year; and
  • II - in cases of absence for a period equal to or greater than three years, to new approval in a certification exam provided for in § 1º.
  • Art. 21. The independent auditor must: (Redaction given, effective from 1/5/2023, by CMN Resolution No. 5.067, of 4/20/2023.)
  • § 2º The reports referred to in item "a" of item II of the caput relating to the financial statements, individual and consolidated, semi-annual and annual, of the institutions mentioned in Art. 8 must contain the communication of the main audit matters.
  • § 3º In financial statements relating to periods less than six months, the substitution of the independent auditor's report referred to in item "a" of item II of the caput by the independent auditor's limited review report is permitted.
  • Art. 23. It is the responsibility of the board of directors to hire and dismiss independent auditors.
  • § 1º The members of the board of directors of the institutions mentioned in Art. 1 will be held liable:
  • II - for hiring and maintaining an independent auditor who is serving a penalty prohibiting the provision of audit services for the institutions mentioned in Art. 1, according to current legislation.
  • Art. 27. The independent auditor must: (Redaction given, effective from 1/5/2023, by CMN Resolution No. 5.067, of 4/20/2023.)
  • a) the existence of a modified opinion in the report referred to in item "a" of item II of Art. 21, before the disclosure of the financial statements;
  • b) the existence or suspicion of the occurrence of the situations mentioned in Art. 13, within a maximum period of three business days from identification.
  • Art. 28. The institutions mentioned in Art. 1 must inform the Central Bank of Brazil about the hiring and replacement of the independent auditor.
  • Art. 29. For the institutions mentioned in Art. 1 that do not have a board of directors, the duties and competencies provided for in this Resolution must be attributed to the management of the institution.
  • Art. 34. Institutions with an already constituted audit committee whose composition is altered by virtue of the provisions of this Resolution must make the necessary statutory adaptations for operation in the manner provided for in this Resolution by December 31, 2024, respecting the end of the mandates in effect on January 1, 2022.
  • In the case of appointment of members of the audit committee before December 31, 2024, the necessary statutory adaptations to comply with the provisions of Arts. 9 and 10 of this Resolution must be carried out previously or simultaneously.
Not carried over (11)
  • Article 1. The following must be audited by independent auditors registered with the Securities and Exchange Commission (CVM) and who meet the minimum requirements to be established by the Central Bank of Brazil: II - The financial statements provided for in Articles 3 and 10 of Resolution No. 2,723 of May 31, 2000;
  • Article 1. The following must be audited by independent auditors registered with the Securities and Exchange Commission (CVM) and who meet the minimum requirements to be established by the Central Bank of Brazil: III - The Quarterly Financial Information document (IFT), referred to in Article 1 of Circular No. 2,990 of June 28, 2000, in the form of special review.
  • The responsibility of the administrators of the institutions, clearing houses, and service providers for the information contained in the financial statements or other information provided does not exempt the independent auditor from the responsibility related to the preparation of the reports required by this regulation or from the audit opinion, nor does it relieve them of the adoption of adequ…
  • § 2. The re-hiring of an independent auditor may only be carried out after three years have elapsed, counted from the date of its replacement.
  • Article 10. Institutions referred to in Article 1, item I, letter "a", which have presented at the close of the last two social fiscal years: I - Reference Equity (PR) equal to or greater than R$1,000,000,000.00 (one billion reais); or
  • Article 10. Institutions referred to in Article 1, item I, letter "a", which have presented at the close of the last two social fiscal years: II - administration of third-party resources in an amount equal to or greater than R$1,000,000,000.00 (one billion reais); or
  • Article 10. Institutions referred to in Article 1, item I, letter "a", which have presented at the close of the last two social fiscal years: III - sum of deposit collections and administration of third-party resources in an amount equal to or greater than R$5,000,000,000.00 (five billion reais).
  • § 2. The use of the facility provided for in this article must be expressly established in a decision of the assembly of each institution belonging to the conglomerate.
  • II - in privately held institutions: b) mandatory participation of the director referred to in Article 5, waiving the requirement of actual exercise time in the position.
  • § 1. Compliance with the formality provided for in this article must be provided for within a maximum period of two years, counted from May 30, 2003.
  • Art. 21. The independent auditor must prepare, as a result of the audit work performed on the institutions, clearing houses, and service providers referred to in Art. 1, the following reports: IV - others required by the Central Bank of Brazil.

“Not carried over” means the sentence has no counterpart in this text; the rule can still be in force in another text.

Similar documents from other regulators

More like this from BCB

BCB published 10 documents in the last 30 days. We email you each new one the day it's published.

Source: Banco Central do Brasil — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works

In RegAlert: added · updated