That sounds a bit vague so should probably be clarified in the actual policy but I would interpret that to mean that there needs to be checks to ensure that data such as bank account details are confirmed. You should ensure checks are made whenever an apparent change of account is received to confirm that the supplier has actually changed their account details and those received are the correct ones, from the right person/supplier.