There needs to be process whereby Bank Details are not committed to the Supplier Account until they have been authorised by a Manager to prevent fraud and a system that protects the data that proves that the details have been authorised. This is in respect of both new and existing suppliers.