These Regulations are enacted in accordance with Paragraph 1, Article 148-3 of the Insurance Act (the "Act").

The term "internal control system" as used in these Regulations means a management process designed by the management, passed by the board of directors, and implemented by the board of directors, management and other employees. The purpose of internal control system is to promote sound business operations of an insurance enterprise so as to reasonably ensure that the following objectives are achieved:
1. The insurance enterprise operates its business in a prudent manner in accordance with the policies and strategies formulated by its board of directors to achieve effectiveness and efficiency in profitability and performance.
2. All transactions are properly authorized;
3. Assets are safeguarded;
4. Financial and other records provide reliable, timely, transparent, complete, accurate and verifiable information and comply with relevant rules and regulations;
5. Management can identify, assess, manage and control operational risks and maintain sufficient capital to address operational risk exposures; and
6. Compliance with applicable rules and regulations.

The internal control system of an insurance enterprise shall be passed by its board of directors. If any director expresses reservation or dissenting opinions, those opinions and reasons therefor shall be recorded in the meeting minutes of the board of directors, which, together with the internal control system passed by the board, shall be submitted to the supervisors or the audit committee. The preceding provision applies to revisions of the internal control system.
If the insurance enterprise has independent director(s), the opinions of respective independent director should be taken into consideration fully when the internal control system is submitted to the board for discussion in accordance with the preceding paragraph. The reservation or dissenting opinions of the independent director(s) and reasons therefor shall be recorded in the meeting minutes of the board of directors.
If the insurance enterprise has established an audit committee, the adoption or revision of its internal control system shall be subject to the consent of at least the majority of the audit committee members and be submitted to the board of directors for a resolution.
Any matter under the preceding paragraph that has not been approved with the consent of at least the majority of the audit committee members may be adopted with the consent of at least two-thirds of all directors, and the resolution adopted by the audit committee shall be recorded in the meeting minutes of the board of directors.
The board of directors of the insurance enterprise shall be aware of the risks it faces in its operations, supervise its operating results and be ultimately responsible for ensuring the establishment and maintenance of a proper and effective internal control system.