| Title： |
Taiwan Stock Exchange Corporation Direction for Auditing Internal Control Systems of Listed Companies(2007.11.12) |
| Date： |
|
|
Article 1
|
These Direction are adopted under Article 2 of the Securities Listing Contract between the Taiwan Stock Exchange Corporation (TSEC) and listed companies, for the purposes of promoting faithful implementation of internal control systems by listed companies and checking whether listed companies are implementing internal control systems in compliance with relevant rules and regulations.
|
|
Article 2
|
Except where otherwise prescribed by act, regulation, or rule, these Directions shall apply to all TSEC audits of the implementation of internal control systems of listed companies. Where any applicable provision of law on which these Directions are based is amended, such amended provision shall govern. These Directions do not apply to listed companies operating financial, insurance, or securities business.
|
|
Article 3
|
The TSEC shall, in principle, carry out quarterly audits of the implementation of audit plans by internal auditors of four percent of listed companies, and shall, where necessary, carry out on-site audits and use compliance tests. On-site audits shall be conducted on at least one-fourth of audited companies, and shall be conducted on any company to which any circumstances under paragraphs 1 through 9 of Article 4 hereof apply. Within one month after the end of each quarter, the TSEC shall compile and submit the audit reports and/or follow-up reports for that quarter to the competent authority for recordation. The quarterly selection ratio under paragraph 1 may be adjusted as needed, provided that at least 16 percent of companies shall be selected for audit in the whole of each year.
|
|
Article 4
|
The TSEC will select a company for audit by the following criteria:
1. where an Internal Control System Statement is issued with a statement other than "no material deficiency" in the internal control system.
2. where an Internal Control System Statement containing a statement of material deficiency has been issued within the most recent three years.
3. where there is a change in the Internal Control System Statement from the original "compliance with all acts and regulations" to "compliance with major acts and regulations."
4. where there is failure to file an auditors list, audit plan, audit plan implementation report, report on correction of deficiencies and irregularities, or Internal Control System Statement under the Regulations for the Establishment of Internal Control Systems by Public Companies.
5. where any material deficiency is found in the implementation of the internal control system under the TSEC Directions for Routine and Exceptional Supervision of the Financial and Business Affairs of Listed Companies or the TSEC Directions for Review of Financial Reports of Listed Companies.
6. where there is any change in mid-year to an annual audit plan already filed, without reasonable grounds.
7. where any material non-compliance was found during the previous internal control system audit.
8. where there is any change in financial or internal audit executives, without reasonable grounds.
9. random selection will be made from among listed companies whose internal control system has not been audited during the most recent three years; however, a company may be exempted from selection if during the preceding year the company has obtained corporate governance certification from an external independent objective institution, provided that if any material deficiency is found in the company's internal control, an audit of its internal control shall still be conducted. .
10. where an audit is otherwise necessary.
|
|
Article 5
|
When auditing the internal control system of a listed company, the TSEC shall, in addition to auditing one or more audit items selected from the annual audit plan formulated by such audited company, list the following matters as requisite audit items:
1. acquisition or disposal of assets.
2. trading in derivatives.
3. lending funds to others.
4. providing endorsements or guarantees for others.
5. state of operations of the board of directors.
6. such other audit items as the competent authority or the TSEC may deem necessary.
An audited company shall submit the following documents within the time limit designated by the TSEC:
1. Internal Control System Statements for the most recent three years.
2. any internal audit plan as well as self-inspection report, audit report, and follow-up report and relevant working papers on audit items that are prepared for the given year.
3. internal control recommendations issued by a certified public accountant for the most recent period.
4. such other materials as the TSEC may deem necessary.
|
|
Article 6
|
The TSEC carries out internal control system audits on listed companies with a view to checking whether the internal auditors of audited companies have faithfully carried out auditing operations. The key points for each audit item include:
1. whether an internal control system has been adopted in compliance with applicable acts and regulations.
2. whether internal controls have been faithfully implemented in compliance with the internal control system.
3. whether internal audits have been faithfully implemented in compliance with the annual audit plan.
|
|
Article 7
|
When conducting an audit of the internal control system of a listed company, the TSEC shall focus its attention on the following matters:
1. review whether the spot-checked operations shown in the audited company’s self-inspection reports, audit reports, follow-up reports, and relevant working papers have undergone proper approval, authorization, validation, adjustment, cross-checking, record checking and division of functions.
2. find out whether the audited company’s auditors have conducted audits in compliance with the formulated annual audit plan and prepared working papers, audit reports, or follow-up reports accordingly.
|
|
Article 8
|
The TSEC auditors shall prepare audit reports on their implementation of auditing work, specifying the following:
1. audit items.
2. audit findings.
3. follow-up activities.
If the audit findings reveal non-compliance by a listed company in its implementation of the internal control system, the audited company shall be requested to propose specific ameliorations or solutions and report the same by letter to the TSEC for recordation. In the event of material non-compliance, the TSCE may by letter request the audited company to dispatch personnel to participate in guidance courses held by a body designated by the competent authority, with a copy of the letter to such designated body. If the audited company fails to dispatch personnel for that purpose, the TSEC may, based upon the nature of the deficiency, list it as a first target for substantive review of the financial report, routine supervision, exceptional supervision, or internal control system audit to be administered at a later time. In addition, the TSEC will continue tracking the amelioration of the deficiency and preparing follow-up reports until the deficiency is remedied. Where necessary, a certified public accountant
may be engaged to issue an opinion on relevant matters. The content of the follow-up report shall include the deficiency found in the previous audit and the status of its remedy in the current audit.
|
|
Article 9
|
Corresponding actions shall be taken promptly upon discovery of the following during an audit:
1. Upon discovery of a material irregularity for which an in-depth audit is necessary, the company shall be listed as an audit target for routine supervision or exceptional supervision.
2. Upon discovery of a material irregularity or violation of applicable provisions of the TSEC Operating Rules, the prescribed measures shall be taken and a report shall be submitted to the competent authority.
3. Upon discovery of a material deficiency or upon occurrence of an event under any subparagraph of Article 43 of the Regulations for the Establishment of Internal Control Systems by Public Companies, where necessary, the TSEC may submit a report to the competent authority requesting the audited company to engage a certified public accountant to conduct a special internal control system audit and issue an audit report.
|
|
Article 10
|
These Directions, and any amendments hereto, shall be publicly announced and implemented after submission to and recordation by the competent authority. Any addition to, deletion from, or amendment to the relevant attachments and schedules hereto shall become effective upon ratification by the president of the TSEC.
|