INTERNAL AUDIT
HM offers internal audit services to Singapore financial institutions, including audits of AML/CFT of companies applying for a Payment Services Act license and need to evidence compliance with MAS Notice PSN02 and the travel rule.
BACKGROUND
Per Paragraph 2.6.1 of the Monetary Authority of Singapore’s (“MAS”) Guidelines on Risk Management Practices – Internal Controls (the “Internal Control Guidelines”), licensed and exempt financial institutions are recommended to “have in place an adequately staffed, independent and permanent internal audit function for assessing whether existing policies, processes and internal controls (including risk management, compliance and corporate governance processes) are independent, effective, appropriate, and remain sufficient for the institution’s business.” Section 2.6 of the Internal Control Guidelines also includes other recommendations relating to the frequency, scope and methodology of independent audits.
THE PROBLEM
While many large institutions have permanent internal audit functions overseen by sufficiently senior personnel, this is not always true for smaller organizations, primarily for cost reasons. Smaller financial institutions frequently outsource their internal audit function. This outsourcing is considered a “material outsourcing arrangement” per the MAS’ Guidelines on Outsourcing, which means it will be something in which the MAS is “particularly interested” and that a financial institution “should be ready to demonstrate to MAS its observance of [the MAS’ Guidelines on Outsourcing].”
OUR SOLUTION
We offer outsourced internal audit services to small and medium-sized financial institutions. While our approach to internal audit is consistent with best practices in independence, methodology and rigor, we distinguish our service on the following basis:
- We designed our service as a result of the experiences our management team had (in other roles) with outsourced auditors who did not sufficiently understand the businesses or material risks of the companies they audited and instead approached the work as a one size fits all/check the box exercise.
- We choose our words carefully and do not inflate our initial risk ratings with the expectation that they will be negotiated down. While we solicit client feedback and take it seriously, our risk assessments are principle-based rather than unreasonably cautious findings or levers to generate follow-on remediation work.
- We prioritize solving gaps identified during the internal audit and helping companies ensure that the issue does not recur. In the internal audit, world, the only thing worse than finding a deficiency is finding the same deficiency two years in a row.
HOW CAN WE HELP YOU?
Get In Touch
Actionable Strategy for a Grey Environment | © 2023 HM
*HM is not a law firm and neither it nor its personnel may act as an advocate or solicitor for purposes of the Singapore Legal Profession Act. HM is a Singapore-headquartered management consulting firm.
HM operates under three brands: HM Strategy, HM Compliance and HM Counsel. HM Compliance offers Singapore compliance services, including outsourced compliance, MAS licensing services, ad hoc advisory and consulting services, corporate governance advisory, ESG consulting, training and internal audit. HM launched as a Singapore compliance consultancy in 2018. HM Strategy offers regulatory and management strategy advice to Boards of Directors and senior management as well as risk management consulting. HM Counsel offers in-house counsel services.