investment products within the same asset class. • Use appropriate metrics to compare similar investments. • Evaluate the real rate of return on investment products. • Confident to undertake research on
Communications with relevant persons (7) Division 7 Cross-border communication (8) Division 8 Companies shall test and assess the BCP (Training, Exercising and Auditing) (9) Division 9 Examples of emergency
) Division 7 Cross-border communication (8) Division 8 Companies shall test and assess the BCP (Training, Exercising and Auditing) (9) Division 9 Examples of emergency incidents which may cause major
be available: 1. General description of the objective, scope of work, and the external reviewer’s credentials. 2. The requisite credentials to evaluate KPIs, SPTs and related benchmarks, baselines and
ec ti on A ct iv it ie s Re po rt 1 J an ua ry 2 01 3 - 31 D ec em be r 20 13 comparison was not carried out. Audit procedures were not performed to assess the reasonableness and reliability of the
); (5) review procedures and processes in the management of information security incidents, after the testing under (4) is carried out, at least once a year; (6) evaluate the results of the testing under
) establish conditions and controls relating to information security in an agreement signed by both parties; (2) monitor, evaluate, review and audit service delivery of the outsourcee regularly; (3) re-assess
) establish conditions and controls relating to information security in an agreement signed by both parties; (2) monitor, evaluate, review and audit service delivery of the outsourcee regularly; (3) re-assess
relevant technology element Identify and assess risks arising from IT Understand, identify, and test relevant ITGC Conclude on risks arising from IT and determine audit response Evaluate deficiencies in ITGC
assess the incremental risks associated with their staff providing personal services while other firms, which collected the necessary information, had no means to verify the reliability or the completeness