Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
1. To verify that an effective § Verify the Risk management strategy document. Manual
risk management policy Check whether the same has been reviewed is
has been developed. regularly reviewed by higher management
§ Verify the last date of Updation.
§ Check whether the risk management strategy
establishes action plans to deal with identified risks
§ Verify that the approval of risk management
strategy is done by the Board of directors,
designated officials or Committee.
§ Check training and experience of Personnel and/ or
advisors hired and retained for formulating risk
management strategy. Employee file can be
verified to check the certificates of the employee.
Reference checks may be carried out in case of
retention of Advisors.
§ Check the frequency of risk evaluation. Comment
on the adequacy of procedures that exist for
identifying and evaluating areas of risk within the
business
1
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
2. To verify that adequate § Verify the approvals of Senior Management for Manual
insurance is obtained to obtaining Insurance Policy and report exceptions if
cover all the identified any.
risks.
§ Verify whether Premium paid v/s Claims made
statements have been prepared and reviewed by
senior management to verify adequacy of risk
coverage.
§ Verify cases of over/ under insurance and report the
same
§ Check whether the Risk Management Strategy
clearly defines the responsibility for insurance of
third party goods or equipment held on site.
Exceptions, if any, should be reported.
§ Check the agreement for third party goods or
equipments held on site to verify whether the
clause of insurance is as per Risk Management
Strategy. Exceptions, if any, should be reported.
3. To verify that all § Verify whether there is an established procedure to Manual
insurance claims are be followed by all personnel in case of accidents,
made promptly and loss or damage to property so that necessary
2
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
regular follow up is done information can be obtained for any subsequent
claim
§ Obtain a list of all accidents or other incidents that
could give rise to an insurance claim. Check
whether the same were reported on a timely basis
to appropriate personnel.
§ Check whether adequate documentary evidence is
retained regarding the accident, loss or damage
giving rise to a claim.
§ Obtain Insurance claim register from the
appropriate personnel and check whether the same
were prepared and submitted, recorded and
followed-up with the insurance company.
§ Check, on a sample basis, whether the claims have
been made after discussing details with personnel
involved in the incident giving rise to the claim and
related department managers to verify that all
relevant costs are included in the claim.
3
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
4. To verify that insurance § Check for changes in circumstances that may Manual
arrangements are impact coverage and whether the same have been
monitored on an on-going intimated to the Insurance Company on a timely
basis. basis. For e.g. Additions to Fixed Assets over and
above the stipulated percentage, is intimated to
Insurance Company on a quarterly basis.
§ Check whether all identified conditions of cover as
per the risk management strategy are mentioned in
the policies.
§ Check whether a register of current insurance
policies is maintained with details of the risk,
insured value, insurer, policy number, current
premium, due date for payment and commission
receivable.
§ Check whether Insurance policies are filed in a
logical manner in a fire-proof safe.
§ Check the Insurance policies to verify that details
are clear and the identity and reliability of the final
insurer is known.
§ Check whether senior management receives and
4
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
reviews periodic reports on claims, losses and risks
covered and not covered
5. To verify that the § Review procurement is as per procurement Manual
selection process of program detailed separately in this manual.
Insurance Companies is
in line with the policies of § Review selection procedure of the insurance
the company companies and validate that the same has been
followed.
6. To verify payments of § Compare the date of Premium payment with the Manual
Premiums is done on premium due date to verify that there are no delays.
time, at the correct
applicable rates after § Check the Insurance Premium Expense account System
availing bonuses and using FS10N transaction code to verify whether
discounts. any penalty or interest on account of delay has
been paid.
§ Check whether the payments made are as per the
prescribed rates
§ Check that all bonuses and discounts have been
availed
7. To verify that necessary § Inquire into the reasons for taking self insurance. Manual
approvals have been
obtained for cases of self § Verify that approval has been taken from
insurance competent authority
5
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
8. To verify that Insurance § Obtain the current policy register. System
premium paid is § On a sample basis, check the calculation of Prepaid
accounted correctly Insurance and accounting of the same in General
Ledger by executing transaction code FBL3N.
9. To review all pending § Obtain list of Insurance claims Pending from (a)
insurance claims Risk Management Cell & (b) User Sections viz.,
Assets, Basins, Services etc.,
§ Obtain from Central Accounts, the break-up list
for “Provision for Outstanding Claims” to cross
verify with the list obtained.
§ From the list obtained prepare Year-wise list of
Outstanding Claims for more than 1 year, 2
years, 3 years and 5 years.
§ Obtain reason for Outstanding against each
claim.
§ Classify reasons for pending insurance claims
into two parts i.e. pending on part of ONGC or
with Insurance Company
§ For claims pending at ONGC, find out whether
such claims are pending due to requirement of
documents like Original Supply Order, Proof of
Customs Duty payment. Verify steps taken to
collect the documents. For cases where such
documents are not available check steps taken to
obtain alternative documents as evidence.
6
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
§ For claims are pending on account of non-
completion of repair/replacement of items by
ONGC ( if insurance claim is payable on actual
repair bill/acutal invoice for replacement), verify
steps taken to expedite repair/replacement.
§ If claims are pending at Insurance Company,
find out whether such claims are pending on
account of any dispute or due to procedural
delay. For cases of disputes verify steps taken by
ONGC to resolve them
§ Check whether Claims are time-barred.
10. To verify that correct § Obtain the Insurance Policy taken from
accounting of Insurance Insurance Company and Corporations Risk
Claims lodged and Management Policy as regards Insurance Claims
amount recovered from Viz., (a) Total Loss and (b) Partial Loss
Insurance Company § Obtain list of Insurance Claim lodged and claims
received during the year and classify them into
Total Loss Claims and Partial Loss Claims.
§ With reference to Risk Management Policy,
verify whether proper accounting has been done
(a) for Total loss of assets (b) for Receipt of
Insurance Claims and (c) for repair expenses
incurred for items damaged
11. To verify the asset lost on § Obtain list of accidents from HSE (Safety)
7
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
accidents are taken out of Section and list of claims lodged for assets
asset master and correct destroyed in such accidents.
asset accounting has been § Get the asset numbers of assets totally lost and
made partially damaged.
§ Use T Code ???????? to verify whether such
assets have been removed from asset master
§ Verify whether correct accounting has been done
for assets totally/partially damaged as per
Accounting Policy on total loss and partial loss.
12. To verify that all § Obtain Insurance Policy pertaining to the claim
insurance claims lodged lodged to find out the scope of insurance
amounts have been coverage (i.e. Physical damage, Removal of
properly calculated and wreck, Extra Expenses, Third party liability
all the subsequent etc.,)
expenses made after the § Verify whether for cases where all the
accidents which are subsequent expenses are claimable from
recoverable from the insurance company
insurance policy as per o that all related expenditure that are
the insurance policy has claimable are booked and easily
been considered. identified for purpose of claim
o separate cost centre/ WBS are created for
booking of related expenses
o list of documents that are to be submitted
for purpose of submitting claim to
Insurance Company are separately
8
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
tracked.
§ Verify whether any committee has been created
drawing from all concerned sections to verify
that no claim goes unnoticed.
13. To verify that whether § Obtain list of Insurance Policies taken by Risk
any double insurane Management Cell, Mumbai
exists or not § Obtain list of Insurance Policies taken by work
Centers viz., Assets, Basins, Services etc/.
§ Obtain list of Insurance Policies taken by
Contractors
§ Review the Scope of Cover (viz., Physical
damage, third Party liability etc., ) in Insurance
Policies
§ Check from above whether any double insurance
exists.
§ Also obtain list of Insurance Policies taken by
Partners in case of Joint venture to find out any
duplication of insurance cover.
14. To verify whether all § Obtain Risk Management Policy of Corporation.
major asset are insured § Review the Corporation’s policy as to Retention
of Risk vis-à-vis Transfer of Risk through
Insurance with reference to value of assets.
§ Obtain list of Major Assets (in terms of Output,
Gross Value) from Assets/Basins/Services.
9
Oil and Natural Gas Corporation Limited
Internal Audit Manual - Volume II
Audit Program – Risk Management
Sl Control Objectives Audit Steps SAP Report WP Completed Reviewed
No System or Ref Review By/ Date By/ Date
manual
§ Check from major Insurance Policies taken by
Risk Management Cell, Mumbai to verify
whether all the major assets as per Corporation’s
Risk Management Policy are adequately
covered.
15. To verify the policy for § Verify from the Insurance Policy whether
valuation of assets to coverage has been taken on basis of replacement
determine the Insured value or current market value.
Value while insuring the § In case of coverage on basis of replacement
assets and see whether the value, find out last date of revaluation.
assets are insured by § For few major items, obtain replacement cost
correct value. from Engineering Services using ongoing
projects as base.
§ Compare the values obtained with the values
mentioned in insurance policy to find out
discrepancy, if any.
§ In cases where Insurance has been taken for
current market value, obtain quotations from
market for few items to cross verify with the
values of items in insurance policy to find out
discrepancy, if any.
10