*ST观典: 内部控制管理制度

Core Viewpoint - The company has established an internal control management system to enhance operational management and risk prevention capabilities, ensuring the protection of investors' rights and interests [1][2]. Group 1: Internal Control Objectives - The internal control aims to ensure the legality and compliance of operations, asset security, and the authenticity of financial reporting, thereby improving operational efficiency and promoting the achievement of strategic goals [2][3]. - The internal control system is applicable to the company, its branches, subsidiaries, and significant investees [2]. Group 2: Principles of Internal Control - The internal control system should adhere to principles such as comprehensiveness, importance, checks and balances, adaptability, and cost-effectiveness [3][4]. - The company must establish a risk management system that covers all business activities, including sales, procurement, production, and financial management [3][4]. Group 3: Internal Environment - The internal environment encompasses governance structure, organizational setup, responsibility allocation, internal auditing, human resource policies, and corporate culture [5][6]. - The board of directors is responsible for establishing and implementing the internal control system, while the management is tasked with daily operations [6][7]. Group 4: Risk Assessment - Risk assessment involves identifying and analyzing risks related to achieving internal control objectives and determining appropriate response strategies [9][10]. - The company should utilize both qualitative and quantitative methods to analyze identified risks and prioritize them based on their likelihood and impact [10][11]. Group 5: Control Activities - Control activities are measures taken based on risk assessment results to keep risks within acceptable limits, including departmental setups, responsibilities, and operational processes [12][13]. - The company should implement various control measures, such as separation of incompatible duties, authorization controls, and budget management [12][13]. Group 6: Information and Communication - The company must establish a system for collecting, processing, and transmitting internal control-related information to ensure timely communication and effective operation [17][18]. - Information technology should be leveraged to enhance information integration and sharing, ensuring the security and stability of information systems [18][19]. Group 7: Internal Supervision and Disclosure - The company should develop an internal inspection and supervision system, defining the roles and responsibilities of internal audit and other supervisory bodies [20][21]. - Regular self-evaluations of internal control effectiveness should be conducted, with reports submitted to the board of directors [21][22].