GIA establishes a risk-based internal audit approach and performs internal audit activities in accordance with the annual audit plan approved by the board of directors, and the scope of internal audit includes internal control systems of the company and its subsidiaries.