Page 91 - NovDefComp

MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY
Defined Benefit and Defined Contribution

Recordkeeping Operations System

Controls Specified by
MassMutual Business Testing Performed by KPMG LLP and Results of Tests

2.13 Data files are uploaded to the Inspected the data file upload batch job and determined that it
web servers by Plan Sponsors was configured to move the data from the web servers to the
through TRC, Secure File Transfer staging area for data exchange processing every fifteen
Protocol (SFTP) and VPN. A batch minutes.
job moves the data from the web
servers to the staging area for data Inspected the system upload configurations for a selection of
data files uploaded to the web servers by Plan Sponsor and
exchange processing every fifteen
minutes. (DB & DC) determined that they were uploaded through TRC, SFTP and
VPN completely.
No Exceptions Noted.

2.14 Expense changes, Executed Inspected sign-offs on the “Investment Change Request
Plan Amendments and Plan Checklist” (DC), or “Passed” AWD status for a selection of DB
Investment changes are reviewed and DC plan changes and determined that changes were
by recordkeeping operations reviewed prior to entry into CAS, PRS, upon receiving
associates based on authorization from the Plan Sponsor, and that plan changes
predetermined criteria for made in CAS, PRS were reviewed by an independent team
authorization by the Plan Sponsor member after input to determine they were entered completely
prior to being updated on PRS, and accurately.
CAS. Changes are reviewed by an No Exceptions Noted.
independent team member after
entry to determine they were
entered completely and accurately.
The reviews are evidenced by
sign-off on the appropriate
checklists, “Investment Change
Request Checklist” (DC), or
“Passed” status in AWD. (DB &
DC)

2.15 Indicative plan changes that Inspected sign-offs on the “Request for Change in Plan
impact multiple plans in response Operations” survey for a selection DC and DB legislative plan
to major legislation are processed changes and determined that changes were authorized for the
in bulk. Authorization is obtained impacted plans upon receiving authorization from the Plan
from the impacted plans to Sponsor and that plan changes were reviewed by an
process the changes. A quality independent team member after input to determine they were
review of the changes is entered completely and accurately.
performed to ensure the changes
were made and processed No Exceptions Noted.
completely and accurately. (DC &
DB)

MassMutual Defined Benefit and Defined Control Objectives, Related Controls and Tests of
Contribution Recordkeeping Operations System Operating Effectiveness
43