Regulations Governing the Establishment of Internal Control Systems by Service Enterprises in Securities and Futures Markets Article 35

When a service enterprise makes any concealment of poor internal management, unsatisfactory internal controls, inadequate implementation of the internal audit system or legal compliance system, or the results of implementation of improvement of any deficiency specified by a competent authority in an examination opinion requiring review and follow-up, or the internal audit unit otherwise conceals any audit findings, and it results in material malpractice, the personnel involved shall be held responsible for negligence in their duties. A service enterprise shall reward an internal auditor who identifies any significant malpractice or negligence and thereby averts material loss to the enterprise.When a material deficiency or malpractice arises within the management or operational units of a service enterprise, the internal audit unit shall have the power to recommend penalties, and shall make a full disclosure in the internal audit report of the negligent personnel who shall be held responsible for the material deficiency.