Administrative Code

Creating a Report: Check the sections you'd like to appear in the report, then use the "Create Report" button at the bottom of the page to generate your report. Once the report is generated you'll then have the option to download it as a pdf, print or email the report.

Virginia Administrative Code
Title 14. Insurance
Agency 5. State Corporation Commission, Bureau of Insurance
Chapter 270. Rules Governing Annual Financial Reporting
1/25/2020

14VAC5-270-148. Management's Report of Internal Control over Financial Reporting.

A. An insurer required to file an Audited Financial Report pursuant to this chapter that has annual direct written and assumed premiums, excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, of $500 million or more shall prepare a report of the insurer's or group of insurers' internal control over financial reporting. The report shall be filed with the commission along with the Communicating Internal Control Related Matters Identified in an Audit pursuant to 14VAC5-270-120. Management's Report of Internal Control over Financial Reporting shall be as of the immediately preceding December 31.

B. Notwithstanding the premium threshold in subsection A of this section, the commission may require an insurer to file Management's Report of Internal Control over Financial Reporting if the insurer is in any RBC level event, or meets any one or more of the standards of an insurer deemed to be in hazardous financial condition pursuant to §§ 38.2-1038, 38.2-5505, 38.2-5506 and 38.2-5510 of the Code of Virginia.

C. An insurer or a group of insurers that is (i) directly subject to Section 404; (ii) part of a holding company system whose parent is directly subject to Section 404; (iii) not directly subject to Section 404 but is a SOX compliant entity; or (iv) a member of a holding company system whose parent is not directly subject to Section 404 but is a SOX compliant entity may file its or its parent's Section 404 Report and an addendum in satisfaction of this section's requirement provided that those internal controls of the insurer or group of insurers having a material impact on the preparation of the insurer's or group of insurer's audited statutory financial statements (those items included in 14VAC5-270-60) were included in the scope of the Section 404 Report. The addendum shall be a positive statement by management that there are no material processes with respect to the preparation of the insurer's or group of insurers' audited statutory financial statements (those items included in 14VAC5-270-60) excluded from the Section 404 Report. If there are internal controls of the insurer or group of insurers that have a material impact on the preparation of the insurer's or group of insurer's audited statutory financial statements and those internal controls were not included in the scope of the Section 404 Report, the insurer or group of insurers may file (i) a Management's Report of Internal Control over Financial Reporting pursuant to this section, or (ii) the Section 404 Report and a Management's Report of Internal Control over Financial Reporting pursuant to this section for those internal controls that have a material impact on the preparation of the insurer's or group of insurers' audited statutory financial statements not covered by the Section 404 Report.

D. Management's Report of Internal Control over Financial Reporting shall include:

1. A statement that management is responsible for establishing and maintaining adequate internal control over financial reporting;

2. A statement that management has established internal control over financial reporting and an assertion, to the best of management's knowledge and belief, after diligent inquiry, as to whether its internal control over financial reporting is effective to provide reasonable assurance regarding the reliability of financial statements in accordance with statutory accounting principles;

3. A statement that briefly describes the approach or processes by which management evaluated the effectiveness of its internal control over financial reporting;

4. A statement that briefly describes the scope of work that is included and whether any internal controls were excluded;

5. Disclosure of any unremediated material weaknesses in the internal control over financial reporting identified by management as of the immediately preceding December 31. Management shall not conclude that the internal control over financial reporting is effective to provide reasonable assurance regarding the reliability of financial statements in accordance with statutory accounting principles if there is one or more unremediated material weaknesses in its internal control over financial reporting;

6. A statement regarding the inherent limitations of internal control systems; and

7. Signatures of the chief executive officer and the chief financial officer (or equivalent position or title).

E. Management shall document and make available upon financial condition examination the basis upon which its assertions, required in subsection D of this section, are made. Management may base its assertions, in part, upon its review, monitoring, and testing of internal controls undertaken in the normal course of its activities.

1. Management shall have discretion as to the nature of the internal control framework used and the nature and extent of documentation in order to make its assertion in a cost effective manner and may include assembly of or reference to existing documentation.

2. Management's Report on Internal Control over Financial Reporting, required by subsection A of this section, and any documentation provided in support thereof during the course of a financial condition examination, shall be kept confidential by the commission.

Statutory Authority

§§ 12.1-13 and 38.2-223 of the Code of Virginia.

Historical Notes

Derived from Volume 24, Issue 12, eff. January 1, 2010.

Website addresses provided in the Virginia Administrative Code to documents incorporated by reference are for the reader's convenience only, may not necessarily be active or current, and should not be relied upon. To ensure the information incorporated by reference is accurate, the reader is encouraged to use the source document described in the regulation.

As a service to the public, the Virginia Administrative Code is provided online by the Virginia General Assembly. We are unable to answer legal questions or respond to requests for legal advice, including application of law to specific fact. To understand and protect your legal rights, you should consult an attorney.