The internal audit unit of our company is subordinate to the Board of Directors. The head of the unit is the Chief Internal Auditor, whose appointment requires the approval from more than half the directors. Additionally, that unit has the positions for auditors in sufficient numbers and with sufficient competence, based on the size of our company, business conditions, management needs, and regulations from other applicable laws, to perform internal audit engagements in our company.
The qualifications of internal auditors should meet the qualifications required by law, and internal auditors should continue to undergo professional training until the meet the requirement for the number of training hours. Additionally, the company should disclose data such as the names, age, education, experience, years of service, and the training received, of its internal auditors, according to the format on the website designated by securities regulators before the end of January each year.
The operation of internal audit
The processing of our company’s internal audit matters is completely governed by regulations of this procedure and the Guidelines for Establishment of Internal Control Systems by Public Companies codified by the Securities and Futures Commission, Ministry of Finance.
Internal auditors should execute all internal audit engagements with independence.
The internal audit unit of our company should draft annual audit plans according to statutory requirements and the outcome of risk evaluation. It should also define the items that should be audited each month/quarter and seek board approval for these items, with which the internal auditors can inspect the internal control regulations and functions of the company. Internal auditors can then compile an audit report along with the work paper and relevant data.
If internal auditors encounter findings through the audit, they should ask the units audited to provide improvement measures and disclose such measures in the audit report. They should also follow up on the deficiencies discovered in the audit and the exception items.
Aside from reporting the condition of audit operations to supervisors, the Chief Internal Auditor should present the report at the Board meeting.
The internal audit unit should demand that all units within the company and all subsidiaries inspect the effectiveness of internal control regulations annually by themselves. Then, the internal audit unit reviews the self-inspection reports of all units and subsidiaries. Then, the internal audit unit compiles a statement on the regulation of internal control according to the required format. The company will compile an internal control regulation statement according to the designated format and perform disclosure and declaration of such statement on the website designated by securities regulators within three months from the end of each fiscal year. The company will also publish such statement in the annual report.
The internal audit unit of our company will perform disclosure and declaration on the condition of execution of the annual audit plan from the previous year before the end of each February on the website designated by securities regulators pursuant to regulations.
The internal audit unit of our company will perform disclosure and declaration on internal control deficiencies discovered from the internal audit in the previous year and the condition of improvements on exceptions before the end of each May on the website designated by securities regulators pursuant to regulations.
The internal audit unit of our company will perform disclosure and declaration on the audit plan of the following year before the end of each December on the website designated by securities regulators pursuant to regulations.
More information or suggestions, please contact us by: