Any cases of non-compliance identified by the internal auditor should be immediately brought to the attention of the Agency, in writing, by the senior management of the bank. Any non-compliance identified by the external auditors, requires them to submit a written report directly to the Agency (in accordance with the requirements in section CA-9.8), in addition to a report to be submitted by the management.