The purposes of the internal audit system are to inspect and evaluate the effectiveness of internal control system and provide timely suggestions for improvement to ensure that the system will continue to be effective and to assist the board of directors and the management in performing their duties.

A credit cooperative shall establish an internal audit unit under its board of directors that performs its duties with independent spirit and objectivity, and reports to the boards of directors and supervisors regularly at least once every half a year.
A credit cooperative shall establish the position of chief auditor who oversees the audit business. The chief auditor should have leadership and the capability to effectively oversee the audit work. The qualifications of chief auditor shall comply with the Regulations Governing the Qualifications and Election/Appointment of Membership Representatives, Directors, Supervisors and Managerial Officers of Credit Cooperatives, and such position shall be equivalent to a vice president.
The chief auditor shall not hold concurrent positions other than those specified below:
1. Chief of audit unit.
2. Compliance officer.
3. Officer in charge of money laundering prevention.
The appointment, dismissal or transfer of the chief auditor shall have the consent of at least two third (2/3) of the members of the board of directors and the prior approval of the central competent authority. The appointment, discharge, promotion, reward, punishment, transfer and performance review of audit personnel will be handled by the chief auditor and take effect after approval by the board of directors and subject to the consent of the board of supervisors. Where such action involves the personnel of other administrative or business units, the chief auditor shall first consult the personnel office to seek the consent of the president and then final approval from the chairman of the board.

Internal auditors shall perform their duties based on the principles of honesty and credibility and stay free of the following conducts:
1. Concealing knowledge of cooperative’s business activity, financial reporting and compliance status that directly impairs the interests of stakeholders, or making untruthful or improper disclosure.
2. Engaging in conduct exceeding the bounds of audit authority or other illicit activity by disclosing privileged information to others for personal gain or damaging the interests of the credit cooperative.
3. Not withdrawing from audit cases involving business he or she used to perform or is having an interest in.　
4. Accepting unjustified entertainment or gratuity or other illicit benefits from credit cooperative employee or customer. Failing to carry out audit or provide related information as instructed by the competent authority.
5. Engaging in activities that violate laws and regulations or is prohibited by the competent authority.

The internal audit unit shall undertake the following tasks:
1. A credit cooperative should outline the organization, organizational structure and responsibility of its internal audit unit, and draft the internal audit manual and working papers. The internal audit manual shall contain at least the evaluation of established internal control requirements and business procedures to determine whether the existing requirements and procedures are properly controlled and whether the administrative units and business units faithfully implement internal control and the outcome of implementation is reasonably effective, and to make suggestions for improvement whenever needed.
2. Drawing up the content and procedure for self-inspection and overseeing the self-inspection carried out by respective units.
3. Drafting an annual audit plan and audit plans for individual units in view of the risk exposures and internal audit implementation of respective units.
The credit cooperative should urge respective units to undertake self-inspection. The internal audit unit will review the self-inspection reports produced by respective units, which, together with the internal control deficiencies discovered by the internal audit unit and results of improvement actions taken, will be used as basis for the board of directors, president, chief auditor and compliance officers to assess the effectiveness of the credit cooperative’s internal control system and issue an internal control statement.

The duties of an internal auditor include the following:
1. The audit of business and accounting books;
2. The audit of assets and liabilities;
3. The audit of contracts, receipts, bills, rules and statements.
4. Inventory taking of stock and articles in custody.
5. Investigation of internal fraud.
6. Follow-up of improvement actions taken against deficiencies found in financial examination and items to be rectified under the order of the competent authority.
7. Inspection of documents handed over during handover of job.
8. Planning, supervision and audit of self-inspection operation and follow-up of improvement actions taken against deficiencies found in self-inspection.
9. Supervision and investigation of construction projects, large-sum acquisitions, orders, and disposal of assets with respect to price negotiation, price comparison, bidding and award of bid.
10. Audit of clearing of non-performing loans and non-accrual loans, and write-off of bad debt.
11. Follow-up and supervision over forwarding cases involving personnel suspected of business violation to law enforcement and actions of recourse and preservation of properties.
12. Other audit related matters.
The clean-up of past due loans and receivables on demand, and write-off of bad debt mentioned in Subparagraph 10 of the preceding paragraph shall be handled in accordance with the regulations and instructions of the central competent authority.

A credit cooperative’s internal audit report in general audit shall, by the nature of the audited unit, disclose the following:
1. The scope of audit, summary evaluation, financial status, capital adequacy, business performance, asset quality, regulatory compliance, internal control, transactions with related parties, procedural control and internal management for respective business, security management of customer data, information management, employee’s education concerning confidentiality, and status of self-inspection; and
2. A status report with regard to status of improvement and inactions by each business unit in response to the examination opinions of or deficiencies found by financial examiner, accountant, or internal auditor or self-inspection personnel, and recommendations enumerated in the internal control statement.

The internal audit unit shall conduct general audit and target audit of the business, asset management, and information units at least once a year, and conduct target audit of other administrative units at least once each year.
The credit cooperative’s internal audit unit should include the implementation of regulatory compliance system into the general audit or target audit of business and administrative units.
The internal audit report, working papers and relevant data in the first paragraph shall be retained for at least five years.

A credit cooperative shall allocate qualified and a suitable number of full time internal auditors commensurate with the number of business units and the size of such businesses, and such auditors (include computer auditors if the cooperative has an information unit) should perform their duties in an independent, objective and impartial manner.
The credit cooperative’s internal auditors shall meet the following requirements:
1. Having graduated from a college or university and minimum two years of experience in financial business or financial examination; or having graduated from a senior high school or vocational school and minimum three years of experience in financial business or financial examination; or have minimum five years of experience in financial business; or having minimum two years of professional experience as an auditor in a accounting firm, or a programmer or systems analyst in a computer firm and having received minimum three months of training in financial business and management;
2. Free of any record of demerit from employer in the last three years, unless the demerit record was a result of joint disciplinary action on account of the violation or offense of a colleague, and the demerit has been offset by other merits; and
3. The lead auditor shall have minimum three years of experience in audit or insurance examination, or minimum one year of audit experience and five years of experience in financial business.

The auditors, lead auditor, and chief and assistant chief of the internal audit unit shall attend at least one session of auditor training class, computer auditing training class, lead auditor training class or chief and assistant chief training class sponsored by a training institution designated by the competent authority. New auditors shall pass the examination of aforesaid training institution and receive a certificate of class completion.
Internal auditors shall attend more than thirty (30) hours of finance-related professional training sponsored by a training institution designated by the competent authority, or the employer credit cooperative each year.
The hours of finance-related professional training received from training institutions designated by the competent authority shall make up at least half of the required training hours specified in the foregoing paragraph.
A credit cooperative shall have a plan for continuous and proper training of personnel involved in self-inspection.

A credit cooperative shall affirm that its internal auditors meet the qualifications as stipulated in the Rules herein. The affirmation documents and records shall be filed and saved for future reference.

To enhance internal check and balance so as to prevent the occurrence of fraud, a credit cooperative shall establish a self-inspection system. The business, asset management and information units of the credit cooperative shall conduct general self-inspection at least once every half a year, and special self-inspection at least once every month. Notwithstanding the foregoing, special self-inspection is not required in the month when a general self-inspection has been conducted, or when a general business audit has been conducted by the internal audit unit of the credit cooperative or the financial holding company, or when a general business examination has been conducted by the financial examiner, or when the audit department has conducted a full business audit, or when a self-evaluation of regulatory compliance has been conducted.
When conducting self-inspection, the chief of the business, asset management or information units shall assign a personnel other than the one who handles the work to carry out self-inspection, and keep the self-inspection operation confidential beforehand.
The self-inspection report, its working papers and related data shall be retained for at least five years.

Officers of a credit cooperative at various levels with the authority to approve cooperative’s business or transactions shall meet any of the requirements below prior to taking office:
1. Having minimum one year of practical experience in conducting internal audits as an employee of the internal audit unit;
2. Having passed the examination and received a certification of course completion in an auditor or computer auditor training course offered by an institution designated by the competent authority.
3. Having passed the test for of banking internal control and internal audit and received a certificate therefore from an institution designated by the competent authority. The content of the test should be comparable to the training course and examination mentioned in the preceding subparagraph.
First-time business unit manager of a credit cooperative shall, in addition to meeting a requirement as provided in the first paragraph hereof and provisions in the Regulations Governing the Qualifications and Election/Appointment of Membership Representatives, Directors, Supervisors and Managerial Officers of Credit Cooperatives, participate in the audit internship of the internal audit unit at least four times in the first half year of appointment. The aforesaid internship shall cover at least one audit item in each audit and at least four audit items cumulatively. The intern shall also produce an internship report for the perusal of the chief auditor. The chief auditor, after approving the report, will issue a certificate and preserve it along with other documents for future reference.