恒基达鑫: 内部审计制度（2025年9月）

General Principles - The internal audit system aims to enhance the internal audit work quality, prevent and control company risks, and protect investors' rights [1][2] - The internal audit is defined as the evaluation of the effectiveness of internal controls and risk management, as well as the authenticity and completeness of financial information [1][3] Internal Audit Organization and Personnel Management - The company establishes an audit committee under the board of directors, with independent directors constituting the majority [2][3] - An audit department is set up as the internal audit institution, responsible for supervising the authenticity and completeness of financial information and internal control systems [2][3] Responsibilities of the Audit Committee - The audit committee guides and supervises the establishment and implementation of the internal audit system [4][5] - It reviews the annual internal audit work plan and ensures the execution of the internal audit plan [4][5] Responsibilities of the Audit Department - The audit department is responsible for formulating audit regulations, preparing annual audit work plans, and conducting audits on business activities, risk management, and internal controls [5][6] - It must report audit findings and issues to the audit committee at least quarterly [6][7] Audit Authority - The audit department has the authority to request relevant units to submit plans, budgets, and documents necessary for the audit [7][8] - It can investigate issues related to audit matters and take temporary measures against serious violations of financial regulations [7][8] Audit Work Procedures - The audit department must submit an annual internal audit work plan to the audit committee two months before the end of each fiscal year [8][9] - Audit reports must be objective, complete, and timely, based on verified audit evidence [8][9] Internal Control Evaluation - The audit department evaluates the effectiveness of internal controls and submits an internal control evaluation report at least annually [10][11] - The evaluation includes the establishment and implementation of internal control systems and identifies any deficiencies [10][11] Information Disclosure - The audit committee issues an annual self-evaluation report on internal controls based on the audit department's evaluation [15][16] - The company must disclose the internal control self-evaluation report and the auditor's report in its annual report [15][16] Rewards and Penalties - The company rewards units and individuals with significant achievements in executing the internal audit system [17] - It holds accountable those who violate the internal audit system, with penalties based on the severity of the violations [17]