# STATUTORY CODE OF DBIS ## TITLE XI: COMPLIANCE AND AUDIT --- ## CHAPTER 1: COMPLIANCE FRAMEWORK ### Section 1.1: Compliance Principles Compliance based on: - Comprehensive: Comprehensive compliance - Proactive: Proactive compliance - Continuous: Continuous monitoring - Effective: Effective compliance ### Section 1.2: Compliance Authority Compliance authority: - Compliance Department: Operational authority - Executive Directorate: Overall authority - All departments: Department responsibilities - As delegated ### Section 1.3: Compliance Scope Compliance covers: - Legal: Legal compliance - Regulatory: Regulatory compliance - Policy: Policy compliance - Procedural: Procedural compliance --- ## CHAPTER 2: INTERNAL CONTROLS ### Section 2.1: Control Framework Internal controls: - Established: Comprehensive controls - Documented: Proper documentation - Monitored: Ongoing monitoring - Improved: Continuous improvement ### Section 2.2: Control Activities Control activities: - Authorization: Authorization controls - Segregation: Segregation of duties - Verification: Verification procedures - Documentation: Documentation requirements ### Section 2.3: Control Monitoring Control monitoring: - Ongoing: Continuous monitoring - Testing: Regular testing - Assessment: Control assessment - Reporting: Regular reporting --- ## CHAPTER 3: INTERNAL AUDIT ### Section 3.1: Internal Audit Function Internal audit: - Independent: Independent function - Objective: Objective assessment - Comprehensive: Comprehensive coverage - Professional: Professional standards ### Section 3.2: Audit Authority Internal audit authority: - Access: Access to all records - Cooperation: Required cooperation - Reporting: Direct reporting to SCC - Independence: Operational independence ### Section 3.3: Audit Activities Audit activities: - Planning: Audit planning - Execution: Audit execution - Reporting: Audit reporting - Follow-up: Follow-up on findings --- ## CHAPTER 4: EXTERNAL AUDIT ### Section 4.1: External Audit Requirements External audit: - Annual: Annual financial audit - Special: Special audits as needed - Independent: Independent auditors - Professional: Professional standards ### Section 4.2: Auditor Selection Auditor selection: - Qualifications: Appropriate qualifications - Independence: Independence requirements - Process: Selection process - Approval: SCC approval ### Section 4.3: Audit Process Audit process: - Planning: Audit planning - Execution: Audit execution - Reporting: Audit reporting - Management: Management response --- ## CHAPTER 5: REGULATORY COMPLIANCE ### Section 5.1: Regulatory Requirements Regulatory compliance: - Identification: Identification of requirements - Implementation: Implementation of requirements - Monitoring: Ongoing monitoring - Reporting: Regulatory reporting ### Section 5.2: Financial Regulations Financial regulations: - Compliance: With financial regulations - Reporting: Financial reporting - Disclosure: Required disclosures - Standards: Accounting standards ### Section 5.3: Security Regulations Security regulations: - Compliance: With security regulations - Standards: Security standards - Reporting: Security reporting - Certification: As required --- ## CHAPTER 6: POLICY COMPLIANCE ### Section 6.1: Policy Framework Policy compliance: - Policies: Established policies - Communication: Policy communication - Implementation: Policy implementation - Monitoring: Policy monitoring ### Section 6.2: Policy Compliance Policy compliance: - Understanding: Policy understanding - Adherence: Policy adherence - Monitoring: Compliance monitoring - Enforcement: Policy enforcement ### Section 6.3: Policy Updates Policy updates: - Review: Regular review - Updates: Policy updates - Communication: Updated communication - Training: Updated training --- ## CHAPTER 7: PROCEDURAL COMPLIANCE ### Section 7.1: Procedures Procedures: - Established: For all operations - Documented: Proper documentation - Communicated: To personnel - Updated: As needed ### Section 7.2: Procedural Compliance Procedural compliance: - Adherence: To established procedures - Monitoring: Compliance monitoring - Documentation: Proper documentation - Improvement: Continuous improvement ### Section 7.3: Procedure Updates Procedure updates: - Review: Regular review - Updates: Procedure updates - Communication: Updated communication - Training: Updated training --- ## CHAPTER 8: COMPLIANCE MONITORING ### Section 8.1: Monitoring Framework Compliance monitoring: - Ongoing: Continuous monitoring - Systematic: Systematic approach - Comprehensive: Comprehensive coverage - Documented: Proper documentation ### Section 8.2: Monitoring Activities Monitoring activities: - Reviews: Regular reviews - Assessments: Compliance assessments - Testing: Compliance testing - Reporting: Compliance reporting ### Section 8.3: Monitoring Reporting Monitoring reports: - Regular: Regular reports to SCC - Findings: Compliance findings - Recommendations: Recommendations - Action: Required action --- ## CHAPTER 9: COMPLIANCE ENFORCEMENT ### Section 9.1: Enforcement Authority Enforcement authority: - Compliance Department: Primary authority - Executive Directorate: Overall authority - Disciplinary: Disciplinary action - Other: Other enforcement ### Section 9.2: Enforcement Actions Enforcement actions: - Corrective: Corrective actions - Preventive: Preventive measures - Disciplinary: Disciplinary action - Other: Other actions as needed ### Section 9.3: Enforcement Procedures Enforcement procedures: - Investigation: Investigation procedures - Decision: Decision process - Action: Enforcement action - Documentation: Proper documentation --- ## CHAPTER 10: COMPLIANCE REPORTING ### Section 10.1: Reporting Requirements Compliance reporting: - Regular: Regular reports to SCC - Annual: Annual compliance report - Special: Special reports as needed - Public: Public reporting as determined ### Section 10.2: Report Content Reports include: - Status: Compliance status - Findings: Compliance findings - Issues: Compliance issues - Recommendations: Recommendations ### Section 10.3: Report Distribution Reports distributed: - To SCC: Regular distribution - To members: As appropriate - To public: As determined - Other: As specified --- **END OF TITLE XI**