In this chapter, the following terms have the meanings indicated. Terms Defined. “Accountant” or “independent certified public accountant” means: An independent certified public accountant or accounting firm in good standing with the American Institute of Certified Public Accountants (AICPA) and in all states in which the accountant is licensed to practice; and For a Canadian or a British company, a Canadian-chartered or British-chartered accountant. “Affiliate of”, or person “affiliated with”, a specific person, means a person that directly, or indirectly through one or more intermediaries, controls, or is controlled by, or is under common control with, the person specified. Audit Committee. “Audit committee” means a committee, or equivalent body, established by the board of directors of an entity for the purpose of overseeing the: Accounting and financial reporting processes of an insurer or group of insurers; Internal audit function of an insurer or group of insurers; and External audits of financial statements of the insurer or group of insurers. “Audit committee” at the election of the controlling person pursuant to Regulation .13H—J of this chapter, may, for one or more controlled insurers, be deemed to be the audit committee of any entity that controls a group of insurers. “Audit committee” means the insurer's entire board of directors, if an audit committee is not designated by the insurer. “Audited financial report” means and includes those items specified in Regulation .04 of this chapter. “Group of insurers” means those insurers included in the reporting requirements of Insurance Article, §7-601, Annotated Code of Maryland, or a set of insurers as identified by management, for the purpose of assessing the effectiveness of internal control over financial reporting. “Indemnification” means an agreement of indemnity or a release from liability where the intent or effect is to shift or limit in any manner the potential liability of the person or firm for failure to adhere to applicable auditing or professional standards, whether or not resulting in part from knowing of other misrepresentations made by the insurer or its representatives. “Independent board member” has the same meaning as described in Regulation .13E and F of this chapter. Insurer. “Insurer” means an insurer holding a certificate of authority issued by the Commissioner, or authorized to engage in the insurance business in this State, as defined in Insurance Article, §§1-101(v) and 4-101, Annotated Code of Maryland. “Insurer” includes: The Maryland Automobile Insurance Fund; The Medical Mutual Liability Insurance Society of Maryland; Nonprofit health service plans; Dental plan organizations; Health maintenance organizations; Managed care organizations; and Provider-sponsored organizations. “Internal audit function” means a person or persons that provide independent, objective, and reasonable assurance designed to add value and improve an organization’s operations and accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management and control and governance processes. “Internal control over financial reporting” means a process effected by an entity's board of directors, management, and other personnel designed to provide reasonable assurance regarding the reliability of the financial statements, that is, those items specified in Regulation .04B(2)—(6) of this chapter, and includes those policies and procedures that: Pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of assets; Provide reasonable assurance that: Transactions are recorded as necessary to permit preparation of the financial statements, that is, those items specified in Regulation .04B(2)—(6) of this chapter; and Receipts and expenditures are being made only in accordance with authorizations of management and directors; and Provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of assets that could have a material effect on the financial statements, that is, those items specified in Regulation .04B(2)—(6) of this chapter. “NAIC” means the National Association of Insurance Commissioners. “SEC” means the United States Securities and Exchange Commission. “Section 404” means Section 404 of the Sarbanes-Oxley Act of 2002, and the SEC's rules and regulations promulgated under it. “Section 404 report” means Management's Report on Internal Control over Financial Reporting as defined by the SEC, and the related attestation report of the independent certified public accountant as described in §B(1) of this regulation. “SOX compliant entity” means an entity that either is required to be compliant with, or voluntarily is compliant with, all of the following provisions of the Sarbanes-Oxley Act of 2002: The preapproval requirements of §201 (§10A(i) of the Securities Exchange Act of 1934); The audit committee independence requirements of §301 (§10A(m)(3) of the Securities Exchange Act of 1934); and The internal control over financial reporting requirements of §404 (Item 308 of SEC Regulation S—K). Workpapers. “Workpapers” means the records kept by the independent certified public accountant of the procedures followed, the tests performed, the information obtained, and the conclusions reached pertinent to the accountant's audit of the financial statements of an insurer. “Workpapers” may include the following documents prepared or obtained by the independent certified public accountant in the course of an audit of the financial statements of an insurer and which support the accountant's opinion: Audit planning documentation; Work programs; Analyses; Memoranda; Letters of confirmation and representation; Abstracts of company documents; and Schedules or commentaries.