
The Audit Committee Members of Maybank from left to right:
Tan Sri Datuk Hadenan A. Jalil (Chairman), Cheah Teik Seng (Member), Dato’ Johan Ariffin (Member) and Sreesanthan Eliathamby (Member)
1. The Committee shall be appointed by the Board of Directors from amongst its non-executive directors and shall consist of at least (3) three members. The Chairman and the majority of the Audit Committee members must be independent directors and at least one (1) member of the committee must be:-
i. he must have passed the examinations specified in Part I of the First Schedule of the Accountants Act, 1967; or
ii he must be a member of one (1) of the associations of accountants specified in Part II of the First Schedule of the Accountants Act, 1967.
2. Where the Chairman is unable to attend the meeting, the members shall elect a person among themselves as Chairman.
3. Review of membership is undertaken once every three (3) years. This review pertains to the terms of office and performance of the members.
1. Meetings shall be held at least once a month or at a frequency to be decided by the Committee and the Committee may invite any person to be in attendance to assist in its deliberations. At least once a year, the Committee shall meet with the external auditor without the presence of Management.
2. The Committee will regulate its own procedure particularly with regard to the calling of meetings, the notice to be given of such meetings, the voting and proceedings of such meetings, the keeping of minutes, and, the custody, production and inspection of such minutes.
3. Upon the request of the external auditor, a meeting is to be convened to consider any matter that the auditor believes should be brought to the attention of the directors and shareholders.
The quorum shall be two (2), both of whom are to be independent directors.
The General Counsel & Company Secretary, En. Mohd Nazlan bin Mohd Ghazali is the Secretary to the ACB.
The Committee is authorised by the Board to:
1. Investigate any activity or matter within its terms of reference.
2. Promptly report to Bursa Malaysia Securities Berhad (“Bursa Securities”) matters which have not been resolved satisfactorily, thus, resulting in a breach of the Bursa Securities Listing Requirements.
3. Obtain external independent professional advice, legal or otherwise deemed necessary.
4. Maintain direct communication channels with external auditors, person(s) carrying out the internal audit function or activity, and with senior management of the Bank and its subsidiaries.
5. Convene meetings with internal and external auditors, without the attendance of the management, whenever deemed necessary.
In discharging the above functions, the ACB has also been empowered by the Board to have:-
The primary duties and responsibilities of the ACB with regards to the Maybank Group’s Internal Audit function, external auditors, financial reporting, related party transactions, annual reporting and investigation are as follows:-
Review the quarterly and year-end financial statements focusing on:-
Review any related party transactions and conflict of interest situations that may arise within the Bank or Maybank Group including transactions, procedures or courses of conducts that may raise questions of Management’s integrity.
Report the Audit Committee’s activities for the financial year.
Instruct the conduct of investigation into any activity or matter within its terms of reference.
Other matters as the Committee considers appropriate or as authorised by the Board of Directors.
During the year under review, the Audit Committee in the discharge of its duties and functions carried out the following activities:
A total of sixteen (16) meetings were held during the Financial Year. The details of attendance of each of the member at the Committee meetings held during the year are as follows:-

The Audit Committee consists of three (3) Independent Non-Executive Directors and one (1) Non-Independent Non-Executive Director. One of the members (En Cheah Teik Seng) is a Fellow of the Institute of Chartered Accountants in England and Wales. This meets the requirement of the Bursa
Securities Listing Requirements which requires at least one qualified accountant as a member of the Audit Committee.
The Audit Committee meets on a scheduled basis at least once a month. The Group Chief Financial Officer (GCFO) and the Chief Audit Executive (CAE) are invited to attend the meetings. The External Auditors are also invited to discuss their management letters, Audit Planning Memorandum and other matters deemed relevant.
In addition to the monthly scheduled meetings, the members of the Audit Committee also had two (2) one-to-one sessions with the External Auditors without the presence of the Management as required.
The Audit Committee also meets to discuss and review the quarterly unaudited financial results and the annual audited financial statements of the Bank and the Maybank Group. The President & Chief Executive Officer (PCEO) and the Group Chief Financial Officer (GCFO) are invited to attend these meetings, together with the External Auditors.
1. Reviewed the annual internal audit plan for FY2011 to ensure adequate scope, coverage over the activities of the Bank and the Group and the resource requirements of internal audit to carry out its functions.
2. Reviewed the internal audit reports, audit recommendations and management’s responses to these recommendations.
3. Reviewed the status report on Management’s efforts to rectify the outstanding audit issues to ensure control lapses are addressed.
4. Reviewed the monthly audit performance reports to ensure the adequacy, performance, progress, achievement, coverage of the internal audit functions and noted the reasons for the resignation of audit staff.
5. Reviewed the audit reports issued by regulatory authorities, Management’s responses to the Regulators’ recommendations and the remedial actions taken to rectify the weaknesses detected.
6. Reviewed the minutes of meetings of the subsidiary companies’ ACB for an overview of the risk management and internal control systems of those subsidiary companies.
7. Provided independent evaluation on the performance and remuneration package of audit staff in accordance with the regulatory requirements.
8. Instructed the conduct of investigation into any activity or matter within its terms of reference.
9. Reviewed the Audit Committee Report and Statement on Internal Control.
10. Reviewed the minutes of meetings of the Internal Audit Committee for an overview of the deliberation and remedial actions taken by Management on the control lapses raised by internal auditors.
11. Reviewed the quarterly unaudited financial results and the annual audited financial statements of the Bank and the Maybank Group to ensure that the financial reporting and disclosure requirements are in compliance with accounting standards, with special focus placed on changes in accounting policy, as well as significant and unusual events/transactions.
12. Reviewed with the external auditors:-
13. Approved the non-audit services provided by the external auditors.
14. Evaluated the performance of the external auditors and made recommendations to the Board on their nomination or re-appointment, scope of work and audit fees, as well as change of external auditor(s) where appropriate.
15. Reviewed the allocation to ensure that it is consistent with the approved matrix.
16. The training attended by the Committees is reported under the Statement on Corporate Governance in page 212.
The Group has a well established in-house Internal Audit (IA) to assist the Board of Directors to oversee that Management has in place a sound risk management, internal control and governance system. The total costs incurred for maintaining the IA function for the year under review was approximately RM33.0 million, comprising mainly salaries, travelling and accommodation expenses and subsistence allowances for audit assignments.
The internal audit function is guided by its Audit Charter and reports functionally to the ACB of the Bank and administratively to the President & Chief Executive Officer, and is independent of the activities or operations of other operating units. The principal responsibility of IA is to undertake regular and systematic reviews of the systems of internal control, so as to provide reasonable assurance that such systems continue to operate efficiently and effectively. The scope of coverage of IA encompasses all units and operations of the Bank, including the subsidiaries. The selection of the units to be audited from the audit universe leading to the formulation of the audit plan is premised on a risk based approach and it is the responsibility of the IA to provide the ACB with an independent and objective report on the state of affairs of the risk management, internal control and governance processes.
The internal audit function for Maybank operations and its subsidiary companies in Malaysia and Papua New Guinea is organised on a Group basis within Maybank. Technical support in the areas of credit risk, market risk, information technology systems and developmental initiatives are centrally driven to ensure consistency of standards and applications. When approving the Annual Audit Plan, the ACB reviews Maybank IA’s human resource requirements to ensure that the function is adequately and appropriately resourced. The internal audit functions for the respective subsidiary companies in Philippines, Indonesia, Singapore and Thailand are organised and supported by the respective resident internal audit teams with direct accountability to the respective Board Audit Committees of these subsidiary companies.
The audit reports which provide the results of the audit conducted in terms of the risk management of the unit, operating effectiveness of internal controls, compliance with internal and regulatory requirements and overall management of the unit are submitted to the respective ACB for their review. Key control issues, significant risks and recommendations are highlighted, along with Management’s responses and action plans for improvement and/or rectification, where applicable. This enables the ACB to execute its oversight function by forming an opinion on the adequacy of measures undertaken by Management.
The International Professional Practices Framework (IPPF) issued by The Institute of Internal Auditors (IIA), the Practice Advisories issued by the IIA, the Guidelines on Internal Audit Functions, Bank Negara Malaysia’s Guidelines on Internal Audit Function of Licensed Institutions and Guidelines on Management of IT Environment are used where relevant as authoritative guides for internal auditing procedures.
During the year under review, the following activities were carried out by IA:-
1. Executed independent assurance role through programmed reviews of units and operations identified on a risk based audit approach in the annual audit plan, to evaluate and improve the effectiveness of risk management, internal control and governance processes.
2. Reviewed the adequacy and appropriateness of the internal controls and risk exposures in the new products/financing packages.
3. Ascertained the extent of compliance with established policies and procedures and statutory requirements.
4. Besides the risk assurance activities, IA also conducts audits on computer hardware, operating and application systems as well as the information communication technology (ICT) network of Maybank Group.
5. Carried out ad hoc assignments and special reviews as instructed by the ACB.
6. Recommended improvements and enhancements to the existing system of internal control and work procedures/processes.
7. Developed an annual audit plan premised on a risk based approach and in cognisance with the Group’s objectives and policies in the context of its evolving business environment, taking into consideration input from Senior Management and the ACB.
8. Carried out audit investigation into activities or matters as instructed by the ACB and Senior Management.
9. Witnessed the tender opening process for procurement of services.
10. Preparation of Audit Committee Report and Statement on Internal Control for the Company’s FY2011 Annual Report.