N.Y. Comp. Codes R. & Regs. tit. 2, § 201.3
(b) Every public authority referred to in section 201.1(b) of this Part shall require its independent auditor to review the public authority's investment policies and practices to determine whether:
(5) a system of adequate internal controls was maintained.
(c)
(1) Investment guideline requirements. These investment guideline requirements are intended to guide public authorities in:
(iv) providing for accurate reporting and evaluation of investment results in conformance with accounting principles generally accepted in the United States of America (GAAP).
(2)
(iii) Public authority investments must be made in accordance with legal requirements:
(3) Investment policy.
(ii) The governing body may wish to delegate the formulation of the investment policy to an investment committee of the governing body. In addition to formulating the investment policy, functions to be performed by the investment committee shall include, but not be limited to, evaluating the investment program by:
(iii) Investment policies shall include the following:
(d) Internal control and procedures. The investment policy shall include provisions requiring the investment officer to establish and maintain an internal control structure designed to ensure that the investment assets of the public authority are protected from loss, theft or misuse. The internal control structure shall be designed to provide reasonable assurance that these objectives are met. The concept of reasonable assurance recognizes that the cost of a control should not exceed the benefits likely to be derived from the control and that the valuation of costs and benefits requirements estimates and judgments by management. Accordingly, the investment officer shall establish a process for an annual independent review by an independent auditor to assure compliance with policies and procedures. The internal controls shall address the following:
(e) Selection of investment firms. An approved list of financial institutions shall be established for each type of investment based on applicable law and upon the qualifications of investment bankers, brokers, agents, dealers and other investment advisors and agents which transact business with the public authority. In addition a list shall also be maintained of approved security broker/dealers selected by creditworthiness (e.g., a minimum capital requirement of $10,000,000 and at least five years of operation). These may include "primary" dealers or regional dealers that qualify under Securities and Exchange Commission (SEC) Rule 15C3-1 (uniform net capital rule). All financial institutions and broker/dealers who desire to become qualified for investment transactions must supply the following as appropriate:
(f) Investment procedures and contracts. The public authority's investment guidelines shall include procedures for each investment or transaction. Such procedures shall include provisions: The investment guidelines shall include a requirement that the public authority enter into a written contract for each investment, the provisions of which cover the items set forth in subclauses (1) through (4) of this clause. If the public authority shall determine by resolution that a written contract is not practical or that there is not a regular business practice of written contracts with respect to a specific investment or transaction, the procedures prescribed for that type of investment shall nonetheless adhere to subclauses (1) through (4) of this clause.
(i) Reporting. The investment policy shall explicitly require periodic reporting on the investment program including:
(3) Reporting to oversight agencies. Section 2925(6) of the Public Authorities Law requires public authorities to submit an annual investment report. Section 2925(7)(a) of the Public Authorities Law requires each public authority, a majority of the members of which consist of persons appointed by the Governor or who serve as members by virtue of holding a civil office of the State, or a combination thereof, to submit the annual investment report to the Division of the Budget with copies to the Office of the State Comptroller, the Senate Finance Committee, and the Assembly Ways and Means Committee. Section 2925(7)(b) of the Public Authorities Law requires each public authority, a majority of the members of which does not consist of persons appointed by the Governor or who serve as members by virtue of holding a civil office of the State, or a combination thereof, to submit the annual investment report to the chief executive officer and chief fiscal officer of each municipality for the benefit of which it was created and to the Office of the State Comptroller. Such report shall include:
(4) Operating procedures. Operating procedures for the administration of an investment program shall include the following:
(5) Procedures for repurchase agreements. Great care must be exercised by those public authorities that invest in repurchase agreements. Because repurchase agreements may expose investors to serious risks, the following procedures shall be followed to reduce those risks:
(E) circumstances, if any, under which substitution of securities subject to the agreement shall be permitted.
(6) Independent audit considerations.
(C) shall be designed to the extent practical to satisfy both the common interests of the public authority and the public officials accountable to others.
(F) a statement on any other material deficiency or finding identified during the audit not covered in subitem (E) of this item.