Or. Admin. Code § 836-029-0030 - Management's Report of Internal Control over Financial Reporting

(1) Each insurer required to file an audited financial report pursuant to OAR 836-029-0015 that has annual direct written and assumed premiums of $500,000,000 or more, excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, shall prepare a report of the insurer's or group of insurers' internal control over financial reporting. The insurer shall file the report with the director, along with the Communication of Internal Control Related Matters Noted in an Audit, as described in 836-029-0035. The Management's Report of Internal Control over Financial Reporting shall be as of December 31 immediately preceding.

(2) A Management's Report of Internal Control over Financial Reporting must include:

(a) A statement that management is responsible for establishing and maintaining adequate internal control over financial reporting;

(b) A statement that management has established internal control over financial reporting and an assertion, to the best of management's knowledge and belief, after diligent inquiry, as to whether its internal control over financial reporting is effective to provide reasonable assurance regarding the reliability of financial statements in accordance with statutory accounting principles;

(c) A statement that briefly describes the approach or processes by which management evaluated the effectiveness of its internal control over financial reporting;

(d) A statement that briefly describes the scope of work that is included and whether any internal controls were excluded;

(e) Disclosure of any unremediated material weaknesses in the internal control over financial reporting identified by management as of December 31 immediately preceding;

(f) A statement regarding the inherent limitations of internal control systems; and

(g) Signatures of the chief executive officer and the chief financial officer (or equivalent position and title).

(3) For a Management's Report of Internal Control over Financial Reporting under section (2) of this rule, management may not conclude that the internal control over financial reporting is effective to provide reasonable assurance regarding the reliability of financial statements in accordance with statutory accounting principles if there is one or more unremediated material weaknesses in its Internal control over financial reporting

(4) Management shall document and make available upon financial condition examination the basis upon which its assertions, required in section (2) of this rule, are made. Management may base its assertions, in part, upon its review, monitoring and testing of internal controls undertaken in the normal course of its activities. In addition:

(a) Management shall have discretion as to the nature of the internal control framework used, and the nature and extent of documentation, in order to make its assertion in a cost effective manner and, as such, may include assembly of or reference to existing documentation.

(b) Management's Report on Internal Control over Financial Reporting, required by section (1) of this rule, and any documentation provided in support thereof during the course of a financial condition examination, shall be kept confidential by the Department.

Notes

Or. Admin. Code § 836-029-0030

ID 11-2012(Temp), f. 6-15-12, cert. ef. 7-1-12 thru 12-27-12; ID 17-2012, f. & cert. ef. 11-7-12

Stat. Auth.: ORS 731.244, 2012 OL Ch. 84, Sec. 4 (Enrolled SB 1547)

Stats. Implemented: 2012 OL Ch. 84, Sec. 2-22 (Enrolled SB 1547)