Framework (IPPF) issued by IIA, which comprises Core Principles for the Professional Practice of Internal Auditing, Code of Ethics, International Standards for the Professional Practice of Internal Auditing, and Definition of Internal Auditing. GIA undergoes an external evaluation of its effectiveness and quality at least once every three (3) years, and the result of the review is subsequently reported to the BAC. GIA is guided by the Internal Control Framework of Committee of Sponsoring Organizations of the Treadway Commission (COSO) and Control Objectives for Information and Related Technology (COBIT) in assessing and reporting the adequacy and effectiveness of the design and implementation of the organisation’s overall system of internal control, risk management and governance. SCOPE AND COVERAGE GIA persistently develops the annual audit plan through a risk-based approach, consideringfactors such as TNB’s risk profile, strategic objectives, regulatory requirements as well as inputs from BAC and senior management. In FY2023, GIA produced a total of 143 reports arising from planned audits (comprising thematic and non-thematic audits), ad-hoc audit, and follow-up audits. Audit findings were presented to the BAC for deliberation and where relevant, BAC requested Management to rectify the weaknesses based on recommendations provided by GIA. GIA oversees the execution of corrective actions using the Audit Management System and reports the status to BAC and Management on a quarterly basis. GIA has classified the areas of review into six (6) audit hotspots, aligning with current trends, shifts in risk landscape, and the dynamic roles of internal auditors. During FY2023, some of the focal areas reviewed encompassed: • Corporate Governance Compliance • Document Management System • HR Reskilling & Upskilling Management • Electric Vehicle Ecosystem • TNB Ways of Working Initiatives • Section 17A Malaysian Anti-Corruption Commission Act* • Health, Safety & Environment Management • Operation and Maintenance • Revenue