All insurance firms must submit a copy of the external auditor's management letter no later than three months of the insurance firm's financial year end.