Annual Report 2021

Further information on the resources and the name and qualification of the Group Head, GIAD are provided in the CG Report in accordance with Practice 10.2 of the MCCG. INTERNAL AUDIT ACTIVITIES DURING THE FINANCIAL YEAR The GIAD implements a risk-based methodology in establishing its strategic and annual audit plan, which determines the areas or units to be audited. During the Financial Year, the AC reviewed, challenged and approved the audit plans for the GIAD and the respective IADs. In doing so, the AC ensured, among others, consistency in the audit methodology deployed, as well as robustness in the audit planning process. The GIAD continues its commitment to equip our internal auditors with adequate knowledge and proficiency. About RM5,000 was spent on training in the areas of auditing skills, technical skills and personal development; inhouse, online and external training. As at 31 December 2021, the average training days attended by each staff are two (2) days. Further information on the resources, objectivity and independence of the Group Head, GIAD and internal auditors are provided in the Corporate Governance Report in accordance with Practice 10.2 of the MCCG. During the Financial Year, audit reviews were conducted based on the internal audit plan approved by the AC. The GIAD and IADs in other AOCs completed and reported on 64 audit assignments, including ad-hoc requests, which were requested by the Board, AC or Senior Management, and those which arose from reports pursuant to the Group’s Whistleblowing Policy. The audits conducted covered a wide range of areas, including key areas such as procurement, ground operations, aircraft refuelling process, human resources, inflight ancillary and warehouse, risk management, ICT desktop management, aviation security, cargo, safety, chartered flight, sales and distribution, marketing, treasury, network management, validation of service level agreement, review of anti-bribery and anticorruption framework implementation, e-commerce, governance and IT systems such as Oracle. The Group Head, GIAD together with Head of Corporate and Station Audit, Head of Fraud and Investigation Unit and Head of IT Audit attended the AC meetings to brief the AC on audit results and significant matters raised in the detailed GIAD report, including findings provided by the respective IADs. Internal audit reports detailing audit findings and recommendations are provided to Management who respond with the actions to be taken. Weekly follow-ups are conducted to monitor the progress of corrective actions until these are completed and closed off. The CEO of Capital A and CEO of AAB are updated on the current status of open action plans. The IADs submit audit reports to the AC every quarter on the status of audit plans, audit findings, and actions taken by Management on such findings. The IADs’ reports and follow-up actions are also presented to the relevant board committees and CEOs of the AOCs. GIAD DIGITALISATION INITIATIVES GIAD has embraced digitalisation aligned with the Group strategy with continuous improvement on the digitalisation initiatives and directions adopted in 2021 by automating the weekly follow-up and development of dashboard processes. C O R P O R A T E G O V E R N A N C E A N N U A L R E P O R T 2 0 2 1 1 7 7

RkJQdWJsaXNoZXIy ODU0MjU5