As previously discussed, this email confirms that Internal Audit will perform a review of ACE Samaggi Insurance’s internal control environment over IT infrastructure and operations. This review will supplement the business and operational audit team’s exercise which is planned for early January. Planning for this review has begun, and fieldwork will be conducted during the week of February 2nd.
The objective of our review is to confirm the existence and evaluate the design of key internal controls. This walk through will involve discussion with relevant control owners, and selected confirmation of underlying support for management representations. Functional IT areas considered as part of our review will include the following:
Network and application user account administration, including privilege entitlements
Computer operations, backup, disaster recovery, anti-virus and patch management
Change management’s software development life-cycle
Information security monitoring and escalation process
This review will be led by Paul Ames, with assistance and support from ACE Samaggi’s Chief Risk Officer and acting head of Internal Audit, Monson.Marukatat, Urai Chatvattanaon, ACE Life Thailand’s Chief Risk Officer, as well as ACE Samaggi’s Internal Audit department.
Additional useful information about ACE Internal Audit and the audit process can be found on ACE Global Village. Visit the ACE Internal Audit group by copying and pasting the following link into your browser: https://village.acegroup.com/groups/internal-audit
Please share this memo with relevant members of the local management team, as appropriate, and let me know of any questions or comments.