24 NCAC 06A .0404         Operator Remains Ultimately Responsible for Internal Controls

(a)  To the extent a Service Provider, Supplier, or other third-party is involved in or provides Internal Controls required in this Chapter, the Operator's Internal Controls shall document the roles and responsibilities of the Service Provider, Supplier, or other third-party. The Operator's Internal Controls shall also include procedures to evaluate the adequacy of and monitor compliance with the Operator's Internal Controls by the Service Provider, Supplier, or other third-party.

(b)  The Operator shall be responsible for compliance with each of its Internal Controls, including ones fulfilled or provided by a Service Provider, Supplier, or other third-party with whom it contracts.

History Note:        Authority G.S. 18C-114(a)(14);

Previously adopted as Rule 1D-004;

Eff. January 8, 2024;

Readopted Eff. March 27, 2024.