三生国健: 三生国健药业（上海）股份有限公司内部审计制度

Core Viewpoint - The internal audit system of Sanofi (Shanghai) Co., Ltd. aims to enhance management and supervision of internal departments, subsidiaries, and significant affiliates, ensuring compliance with laws and regulations while improving audit quality [1][2]. Group 1: Internal Audit Definition and Objectives - Internal audit is defined as an evaluation activity conducted by internal personnel to assess the effectiveness of internal controls, risk management, and the authenticity of financial information [2][3]. - The objectives of internal control include compliance with laws, safeguarding assets, and ensuring the accuracy and completeness of information disclosure [3][4]. Group 2: Internal Audit Department Structure - The company has established an independent internal audit department that reports directly to the board's audit committee [3][5]. - The internal audit department must have a minimum of three dedicated audit personnel, with the head being a full-time position nominated by the audit committee [3][6]. Group 3: Audit Responsibilities - The internal audit department is responsible for evaluating the completeness and effectiveness of internal control systems across the company and its subsidiaries [5][10]. - It must conduct audits on financial data, ensuring legality, compliance, and authenticity, including financial reports and performance forecasts [5][10]. Group 4: Audit Procedures - The internal audit process includes planning, notifying the audited unit, collecting evidence, and drafting audit reports [8][9]. - Audit reports must be submitted within ten days after the audit's conclusion, allowing the audited unit to provide feedback [9][10]. Group 5: Internal Control Evaluation - The internal audit department is required to submit an annual internal control evaluation report to the audit committee, detailing the effectiveness of internal controls [10][11]. - If significant deficiencies or risks are identified, the audit committee must be promptly informed [11][12]. Group 6: Compliance and Reporting - The company must disclose any significant internal control deficiencies or risks to the stock exchange and provide details on corrective measures taken [11][12]. - The internal audit department must audit significant external investments, asset purchases, and guarantees to ensure compliance with regulations [12][13]. Group 7: Training and Accountability - The internal audit department is responsible for training and evaluating audit personnel to enhance their professional skills [33][34]. - Any misconduct by audit personnel, such as leaking confidential information or providing false reports, will result in disciplinary actions [34][35].