The internal audit department shall conduct a routine business audit at least annually, and a special business audit on CDF's subsidiaries' finance, risk management and legal compliance with applicable acts and regulations at least semiannually.