6.2 KiB
6.2 KiB
STATUTORY CODE OF DBIS
TITLE XI: COMPLIANCE AND AUDIT
CHAPTER 1: COMPLIANCE FRAMEWORK
Section 1.1: Compliance Principles
Compliance based on:
- Comprehensive: Comprehensive compliance
- Proactive: Proactive compliance
- Continuous: Continuous monitoring
- Effective: Effective compliance
Section 1.2: Compliance Authority
Compliance authority:
- Compliance Department: Operational authority
- Executive Directorate: Overall authority
- All departments: Department responsibilities
- As delegated
Section 1.3: Compliance Scope
Compliance covers:
- Legal: Legal compliance
- Regulatory: Regulatory compliance
- Policy: Policy compliance
- Procedural: Procedural compliance
CHAPTER 2: INTERNAL CONTROLS
Section 2.1: Control Framework
Internal controls:
- Established: Comprehensive controls
- Documented: Proper documentation
- Monitored: Ongoing monitoring
- Improved: Continuous improvement
Section 2.2: Control Activities
Control activities:
- Authorization: Authorization controls
- Segregation: Segregation of duties
- Verification: Verification procedures
- Documentation: Documentation requirements
Section 2.3: Control Monitoring
Control monitoring:
- Ongoing: Continuous monitoring
- Testing: Regular testing
- Assessment: Control assessment
- Reporting: Regular reporting
CHAPTER 3: INTERNAL AUDIT
Section 3.1: Internal Audit Function
Internal audit:
- Independent: Independent function
- Objective: Objective assessment
- Comprehensive: Comprehensive coverage
- Professional: Professional standards
Section 3.2: Audit Authority
Internal audit authority:
- Access: Access to all records
- Cooperation: Required cooperation
- Reporting: Direct reporting to SCC
- Independence: Operational independence
Section 3.3: Audit Activities
Audit activities:
- Planning: Audit planning
- Execution: Audit execution
- Reporting: Audit reporting
- Follow-up: Follow-up on findings
CHAPTER 4: EXTERNAL AUDIT
Section 4.1: External Audit Requirements
External audit:
- Annual: Annual financial audit
- Special: Special audits as needed
- Independent: Independent auditors
- Professional: Professional standards
Section 4.2: Auditor Selection
Auditor selection:
- Qualifications: Appropriate qualifications
- Independence: Independence requirements
- Process: Selection process
- Approval: SCC approval
Section 4.3: Audit Process
Audit process:
- Planning: Audit planning
- Execution: Audit execution
- Reporting: Audit reporting
- Management: Management response
CHAPTER 5: REGULATORY COMPLIANCE
Section 5.1: Regulatory Requirements
Regulatory compliance:
- Identification: Identification of requirements
- Implementation: Implementation of requirements
- Monitoring: Ongoing monitoring
- Reporting: Regulatory reporting
Section 5.2: Financial Regulations
Financial regulations:
- Compliance: With financial regulations
- Reporting: Financial reporting
- Disclosure: Required disclosures
- Standards: Accounting standards
Section 5.3: Security Regulations
Security regulations:
- Compliance: With security regulations
- Standards: Security standards
- Reporting: Security reporting
- Certification: As required
CHAPTER 6: POLICY COMPLIANCE
Section 6.1: Policy Framework
Policy compliance:
- Policies: Established policies
- Communication: Policy communication
- Implementation: Policy implementation
- Monitoring: Policy monitoring
Section 6.2: Policy Compliance
Policy compliance:
- Understanding: Policy understanding
- Adherence: Policy adherence
- Monitoring: Compliance monitoring
- Enforcement: Policy enforcement
Section 6.3: Policy Updates
Policy updates:
- Review: Regular review
- Updates: Policy updates
- Communication: Updated communication
- Training: Updated training
CHAPTER 7: PROCEDURAL COMPLIANCE
Section 7.1: Procedures
Procedures:
- Established: For all operations
- Documented: Proper documentation
- Communicated: To personnel
- Updated: As needed
Section 7.2: Procedural Compliance
Procedural compliance:
- Adherence: To established procedures
- Monitoring: Compliance monitoring
- Documentation: Proper documentation
- Improvement: Continuous improvement
Section 7.3: Procedure Updates
Procedure updates:
- Review: Regular review
- Updates: Procedure updates
- Communication: Updated communication
- Training: Updated training
CHAPTER 8: COMPLIANCE MONITORING
Section 8.1: Monitoring Framework
Compliance monitoring:
- Ongoing: Continuous monitoring
- Systematic: Systematic approach
- Comprehensive: Comprehensive coverage
- Documented: Proper documentation
Section 8.2: Monitoring Activities
Monitoring activities:
- Reviews: Regular reviews
- Assessments: Compliance assessments
- Testing: Compliance testing
- Reporting: Compliance reporting
Section 8.3: Monitoring Reporting
Monitoring reports:
- Regular: Regular reports to SCC
- Findings: Compliance findings
- Recommendations: Recommendations
- Action: Required action
CHAPTER 9: COMPLIANCE ENFORCEMENT
Section 9.1: Enforcement Authority
Enforcement authority:
- Compliance Department: Primary authority
- Executive Directorate: Overall authority
- Disciplinary: Disciplinary action
- Other: Other enforcement
Section 9.2: Enforcement Actions
Enforcement actions:
- Corrective: Corrective actions
- Preventive: Preventive measures
- Disciplinary: Disciplinary action
- Other: Other actions as needed
Section 9.3: Enforcement Procedures
Enforcement procedures:
- Investigation: Investigation procedures
- Decision: Decision process
- Action: Enforcement action
- Documentation: Proper documentation
CHAPTER 10: COMPLIANCE REPORTING
Section 10.1: Reporting Requirements
Compliance reporting:
- Regular: Regular reports to SCC
- Annual: Annual compliance report
- Special: Special reports as needed
- Public: Public reporting as determined
Section 10.2: Report Content
Reports include:
- Status: Compliance status
- Findings: Compliance findings
- Issues: Compliance issues
- Recommendations: Recommendations
Section 10.3: Report Distribution
Reports distributed:
- To SCC: Regular distribution
- To members: As appropriate
- To public: As determined
- Other: As specified
END OF TITLE XI