上海雅仕: 内部审计管理制度（2025年8月修订）

General Principles - The internal audit management system aims to standardize internal audit work, clarify the responsibilities of the internal audit organization and personnel, and enhance internal control, management improvement, and economic efficiency [1][2] - Internal audit is defined as an independent and objective evaluation and supervision of financial expenditures, economic activities, internal controls, and risk management within the company and its subsidiaries [1][2] Objectives of Internal Audit - The overall goals of internal audit include improving the quality of accounting information, ensuring compliance with financial regulations, monitoring the execution of company policies, safeguarding company assets, and providing recommendations for enhancing internal controls [1][2] Internal Audit Organization and Personnel - The company will establish an audit department as a dedicated internal audit organization, with a structured team based on business scale and needs [2][3] - Internal audit personnel must possess relevant political qualities, professional qualifications, knowledge, experience, and effective communication skills [2][3] Audit Scope and Content - The internal audit will cover all subsidiaries, departments, and other established organizations, focusing on the authenticity and legality of financial reports and operational results [4][5] - The audit will also include compliance with company regulations and the effectiveness of internal controls [4][5] Responsibilities of Internal Audit - The internal audit department is responsible for formulating annual and specific audit plans, conducting comprehensive audits of financial and operational activities, and establishing operational norms for audit work [5][6] - The audit department must report audit plans, results, and statistics to the company's board and relevant committees [5][6] Audit Types and Methods - Various types of internal audits include financial statement audits, financial expenditure audits, compliance audits, internal control audits, and special investigations as deemed necessary by the board [8][9] - Audit methods may include document review, on-site audits, and online real-time audits to enhance efficiency [8][9] Audit Procedures - The internal audit process involves setting annual goals, communicating with management, preparing audit plans, and conducting audits according to established procedures [10][11] - Audit reports must be objective, accurate, and clear, summarizing the audit's purpose, scope, findings, and recommendations [13][14] Audit Documentation and Management - Internal audit documentation must comply with national laws and company policies, including audit notifications, reports, working papers, and evidence [14][15] - The audit department is responsible for maintaining comprehensive audit archives and ensuring the confidentiality of audit materials [14][15] Rewards and Penalties - The internal audit department can recommend improvements to governance structures and propose accountability measures for units or individuals responsible for significant losses or violations [16][17] - Any retaliation against internal auditors or violations of audit protocols will be subject to legal consequences [16][17]