Code of Maryland Regulations
Title 31 - MARYLAND INSURANCE ADMINISTRATION
Subtitle 05 - ASSETS, LIABILITIES, RESERVES, AND INVESTMENTS OF INSURERS
Chapter 31.05.11 - Annual Financial Reporting
Section 31.05.11.14 - Internal Audit Function Requirements

Universal Citation: MD Code Reg 31.05.11.14

Current through Register Vol. 51, No. 19, September 20, 2024

A. An insurer is exempt from the requirements of this section if:

(1) The insurer has annual direct written and unaffiliated assumed premium, including international direct and assumed premium but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than $500,000,000; and

(2) The insurer is a member of a group of insurers and the group has annual direct written and unaffiliated assumed premium, including international direct and assumed premium but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than $1,000,000,000.

B. Function.

(1) The insurer or group of insurers shall establish an internal audit function providing independent, objective, and reasonable assurance to the audit committee and insurer management regarding the insurers':
(a) Governance;

(b) Risk management; and

(c) Internal controls.

(2) The reasonable assurance shall be provided by performing general and specific audits, reviews, and tests and by employing other techniques deemed necessary to:
(a) Protect assets;

(b) Evaluate control effectiveness and efficiency; and

(c) Evaluate compliance with policies and regulations.

C. Independence.

(1) In order to ensure that internal auditors remain objective, the internal audit function shall be organizationally independent.

(2) The internal audit function may not defer ultimate judgement on audit matters to others and shall appoint an individual to head the internal audit function who will have direct and unrestricted access to the board of directors.

(3) Organizational independence does not preclude dual-reporting relationships.

D. Reporting.

(1) The head of the internal audit function shall report to the audit committee on:
(a) The periodic audit plan;

(b) Factors that may adversely impact the internal audit function's independence or effectiveness;

(c) Material findings from completed audits; and

(d) The appropriateness of corrective actions implemented by management as a result of audit findings.

(2) The reporting shall be done regularly, but on no less than an annual basis.

E. Additional Requirements. If an insurer is a member of an insurance holding company system or included in a group of insurers, the insurer may satisfy the internal audit function requirements set forth in this regulation at the:

(1) Ultimate controlling parent level;

(2) Intermediate holding company level; or

(3) Individual legal entity level.

Disclaimer: These regulations may not be the most recent version. Maryland may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.