annual - Maxis

82 | Maxis BERHAD Annual Report 2009
Code of Business Practice
The Group is committed to conducting business fairly, impartially
and ethically and in full compliance with all laws and regulations.
To this end, there is a detailed Maxis Code of Business Practice
(“the Code”), which stipulates how employees as well as
external parties such as vendors, suppliers and contractors who
conduct business with us should conduct themselves in all
business matters.
All employees are required to sign an online declaration upon
joining the Group and on an annual basis in compliance with the
Code. External parties such as vendors, suppliers and contractors
who conduct business with the Group are required to sign a
declaration that they have read and will adhere to the contents
of the Code.
To support the implementation and effectiveness of the Code,
there is an established Office of Business Practice to provide
policy guidance and to facilitate compliance with the Code. The
Office of Business Practice will continuously look into ways to
enhance the Group’s highest standards of business conduct and
ethics, and to benchmark these against best practices.
The Company has also established the Ethics Hotline, a safe and
effective channel of reporting, to allow employees or parties
dealing with us to report to us any observed behavioural
inconsistencies which are not in accordance with the general
standards and business ethics.
Revenue Assurance
The Revenue Assurance department is responsible for the
continuous monitoring of potential revenue leakage that may
arise from day-to-day operations. Processes and controls within
the revenue cycle are reviewed on a rotational basis to ensure
they function effectively and efficiently, which includes
performance and examination of regular automated test calls.
These findings are reported to Management. Every quarter, key
issues on identified revenue leakages and the corresponding
action plans taken are reported to the Audit Committee. The
Revenue Assurance Working Committee meets quarterly to
address key revenue assurance issues and drive revenue
assurance initiatives across the Group.
Subscriber Fraud Management
The Subscriber Fraud Management function complements the
Revenue Assurance function. Whilst the Revenue Assurance
function reviews controls within the revenue cycle as indicated
above, the Subscriber Fraud Management function monitors
daily subscriber call patterns based on pre-set parameters
between Maxis’ subscribers with other domestic and
international operators on a real time basis and appropriate
actions are taken immediately for suspected fraudulent calls. It
uses an industry developed system to monitor call patterns on a
24/7 basis throughout the financial year. In addition, it also
reviews key new services/products for possible fraud risk and
recommends countermeasures. Fraud findings are reported
quarterly to Management and the Audit Committee to ensure
remedial actions are taken.
Business Continuity Planning
The Business Continuity Planning (“BCP”) function is responsible
for identifying activities and operations that are critical to
sustaining business operations in the event of a disaster. These
activities include facilitating the building of additional
redundancies in network infrastructure and establishing alternate
sites where key operational activities can be resumed. A risk
based approach is applied in identifying the key initiatives and
their levels of importance by reviewing critical systems, single
point failures as well as their impact on the business of the Group
as a whole.
During the financial year, selected critical areas as identified by
risk priority were tested to assess the effectiveness of the
implemented BCP initiatives. The progress of these initiatives was
reported monthly to Management and presented half yearly to
the BCP Steering Committee and the Audit Committee.
Regulatory
The Regulatory function reports to the Chief Financial Officer. It
ensures compliance with the Communications and Multimedia
Act 1998 (“CMA”), and its subsidiary legislation, which regulate
the Group’s core business in the communications and multimedia
sector in Malaysia. As a licensee under the CMA, the Group
adheres to its licensing conditions, as well as economic, technical,
social and consumer protection regulations embedded in the