(1) Each company shall file with the commissioner a report that includes an evaluation, in accordance with generally accepted auditing standards, of the internal controls of the company relating to the methods and procedures used in the securing of assets and the reliability of the financial records. The evaluation must include, but is not limited to, those controls governing the system of authorization and approval and separation of duties.