Overview
ISO 5405:2024 - Audit data collection extension - Government regulated financial reports and payroll - is an ISO standard extension to ISO 21378 that defines a consistent data interface for obtaining government-regulated financial report data and payroll data. It standardizes the data contents, table structures and naming conventions (not the presentation format) to help auditors, government authorities and software vendors extract, share and analyse statutory financial statements and payroll records across ERP systems and jurisdictions.
Key points:
- Extension of ISO 21378, adding GRFR (Government Regulated Financial Reports) and PAY (Payroll) modules.
- Focus on data elements, tables and fields (e.g., GRFR_Report_Header, GRFR_Report_Body, PAY_Payroll_Period, PAY_Payslips).
- Applicable to government audits, external independent audits and internal audits.
- Includes guidance (Annex A and B) for implementing modules and mapping to general ledger sources.
Key technical topics and requirements
- Modular data model: Two new modules (GRFR, PAY) integrate with existing BAS/GL modules from ISO 21378 to provide a complete audit data collection solution.
- Tables and fields: Defined table structures and selected key fields for report headers, report bodies and payroll items; each element has prescribed data types and representations.
- Primary keys and reference identifiers: Use of PKs and REF keys to maintain referential integrity between modules (e.g., Report_ID, Reporting_Entity_Code).
- Naming conventions: Standardized rules (max length, alphanumeric + underscore, UpperCamel-style words) to ensure compatibility with ERP and database systems.
- Time and date representation: Conformance with ISO 8601-1 for date/time interchange.
- Scope and intent: Defines content requirements (what data to include) rather than country-specific report formats, and supports mapping between corporate chart of accounts and statutory taxonomies for consistent cross-company audits.
- Support for complex reports: Enables extraction from multiple GL sources and report-level adjustments to produce consolidated or jurisdiction-specific statements.
Practical applications and users
Who benefits:
- Government audit authorities and revenue agencies seeking standardized statutory reports for cross-company or cross-year comparisons.
- External audit firms and internal audit teams automating financial statement and payroll sampling, testing and analytics.
- ERP vendors and audit data service providers implementing data export/import interfaces to meet regulatory and audit requirements.
- Software developers building audit tooling, data warehouses or compliance reporting platforms.
Typical uses:
- Automating extraction of statutory financial statements and payroll records from ERP systems.
- Mapping corporate accounts to local statutory taxonomies to enable consistent government-regulated reporting.
- Enabling cross-border audit cooperation and secure data sharing between agencies and auditors.
Related standards
- ISO 21378 - Audit data collection standard (base modules)
- ISO 8601-1 - Date and time representations for information interchange
- Developed by ISO/TC 295 (Audit data services)
Keywords: ISO 5405:2024, audit data collection, government regulated financial reports, payroll audit, GRFR module, PAY module, ISO 21378 extension, audit automation, ERP integration.