15.02.2014 Views

ENRICHING LIVES EXPANDING HORIZONS - Maxis

ENRICHING LIVES EXPANDING HORIZONS - Maxis

ENRICHING LIVES EXPANDING HORIZONS - Maxis

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

MAXIS BERHAD<br />

ANNUAL REPORT 2011<br />

233<br />

9. Legal<br />

The Legal department plays a pivotal role in ensuring that the interests of the Group are preserved and safeguarded from a<br />

legal perspective. It also plays a key role in advising the Board and Management on legal and strategic matters. The Board is<br />

briefed through reports to the Audit Committee as and when there are any changes in applicable provisions of the law.<br />

10. Limits of Authority<br />

A Limits of Authority (LOA) manual sets out the authorisation limits for various levels of <strong>Maxis</strong>’ Management and staff and also<br />

those matters requiring Board approval to ensure accountability, segregation of duties and control over the Group’s financial<br />

commitments. The LOA manual is reviewed and updated periodically to reflect business, operational and structural changes.<br />

11. Policies and Procedures<br />

There is extensive documentation of policies, procedures, guidelines and service level agreements in manuals and on the Group’s<br />

intranet site including those relating to Financial, Contract Management, Marketing, Procurement, Human Resources, Information<br />

Systems, Network Operations, Legal, System and Information Security Controls. Continuous control enhancements are made in<br />

line with <strong>Maxis</strong>’ new and growing business strategy including the strengthening of controls over device management.<br />

12. Financial and Operational Information<br />

A detailed budgeting and reporting process has been established. Comprehensive budgets are prepared by the operating<br />

units and presented to the Board before the commencement of a new financial year. Upon approval of the budget, the<br />

Group’s performance is then tracked and measured against the approved budget on a monthly basis. Reporting systems which<br />

highlight significant variances against plan are in place to track and monitor performance. These variances in financial as well as<br />

operational performance indices are incorporated in detail in the monthly management reports. On a quarterly basis, the results<br />

are reviewed by the Board to enable them to gauge the Group’s overall performance compared to the approved budgets and<br />

prior periods.<br />

13. Systems and Information Security<br />

The Systems and Information Security department (SIS) is responsible for continuously monitoring and resolving security threats<br />

to the Company both internally and externally. This includes conducting security awareness, vulnerability assessment and<br />

penetration test programmes, and compliance audits on the IT systems and Networks of <strong>Maxis</strong> to reduce the impact of service<br />

interruption due to attacks, negligence and malware. The effectiveness of the security programme is validated by external<br />

security consulting companies.<br />

Apart from the internal security compliance programmes, SIS is also targeting to seek and maintain compliance of several<br />

regulatory and industry security programmes, namely: ISO27001:2005, Payment Card Industry/Data Security Standard, and the<br />

Personal Data Protection Act 2010 by end of 2012.<br />

SIS is governed by a group of <strong>Maxis</strong> Senior Leadership team members who will meet quarterly to direct and approve the<br />

corporate security policies and standards set by the department and security projects undertaken by the team. It is also<br />

responsible for updating the Audit Committee at least annually on the Company’s security status.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!