The issue should have been reported to ASIC, Ms Orr says.

She said the website errors were a "significant breach" that needed to be reported.

"This was the wrong decision wasn't it Mr Winter, not to report this to ASIC?"

"Yes," he replied