Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336) : Sansheng Guojian: internal control evaluation report in 2021

Company code: Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336) company abbreviation: Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336)

Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336) Pharmaceutical (Shanghai) Co., Ltd

Internal control evaluation report in 2021

All shareholders of Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336) Pharmaceutical (Shanghai) Co., Ltd.:

In accordance with the provisions of the basic norms of enterprise internal control and its supporting guidelines and other internal control regulatory requirements (hereinafter referred to as the “enterprise internal control normative system”), combined with the internal control system and evaluation methods of the company (hereinafter referred to as the “company”), on the basis of daily and special supervision of internal control, We evaluated the effectiveness of the company’s internal control on December 31, 2021 (the benchmark date of the internal control evaluation report). I Important statement

It is the responsibility of the board of directors of the company to establish, improve and effectively implement internal control, evaluate its effectiveness and truthfully disclose the internal control evaluation report in accordance with the provisions of the enterprise’s internal control standard system. The board of supervisors shall supervise the establishment and implementation of internal control by the board of directors. The management is responsible for organizing and leading the daily operation of the enterprise’s internal control. The board of directors, the board of supervisors and the directors, supervisors and senior managers of the company guarantee that there are no false records, misleading statements or major omissions in the contents of this report, and bear individual and joint legal liabilities for the authenticity, accuracy and completeness of the contents of the report.

The objective of the company’s internal control is to reasonably ensure the legal compliance of operation and management, asset safety, authenticity and integrity of financial reports and relevant information, improve operation efficiency and effect, and promote the realization of development strategy. Due to the inherent limitations of internal control, it can only provide reasonable assurance for the realization of the above objectives. In addition, as changes in circumstances may lead to inappropriate internal control or reduced compliance with control policies and procedures, there is a certain risk to speculate the effectiveness of internal control in the future according to the internal control evaluation results. II Internal control evaluation conclusion 1 On the benchmark date of the internal control evaluation report, does the company have any major defects in the internal control of financial reporting

□ yes √ no

2. Evaluation conclusion of internal control over financial reporting

√ valid □ invalid

According to the identification of major defects in the company’s internal control over financial reporting, there are no major defects in the internal control over financial reporting on the benchmark date of the internal control evaluation report. The board of Directors believes that the company has maintained effective internal control over financial reporting in all major aspects in accordance with the requirements of the enterprise’s internal control standard system and relevant regulations. 3. Whether major defects in internal control over non-financial reporting are found

□ yes √ no

According to the identification of major defects in the company’s internal control over non-financial reports, the company found no major defects in the company’s internal control over non-financial reports on the benchmark date of the internal control evaluation report.

4. Factors affecting the evaluation conclusion of internal control effectiveness from the benchmark date of internal control evaluation report to the date of issuance of internal control evaluation report □ applicable √ not applicable

There are no factors affecting the evaluation conclusion of the effectiveness of internal control from the base date of the internal control evaluation report to the date of issuance of the internal control evaluation report. 5. Whether the internal control audit opinion is consistent with the company’s evaluation conclusion on the effectiveness of internal control over financial reporting

√ yes □ No 6 Whether the disclosure of major defects in internal control of non-financial reports in the internal control audit report is consistent with the disclosure of the company’s internal control evaluation report √ yes □ no III Internal control evaluation (I) Scope of internal control evaluation

According to the risk oriented principle, the company determines the main units, businesses and matters included in the evaluation scope and high-risk areas. 1. The main units included in the evaluation scope include Sunshine Guojian Pharmaceutical(Shanghai) Co.Ltd(688336) Pharmaceutical (Shanghai) Co., Ltd. and its holding subsidiaries. 2. Proportion of units included in the scope of evaluation:

Proportion of indicators (%)

The ratio of the total assets of the units included in the evaluation scope to the total assets of the company’s consolidated financial statements 100

The total operating income of the units included in the evaluation scope accounts for 100% of the total operating income in the company’s consolidated financial statements

3. The main operations and matters included in the scope of evaluation include:

Control environment: organizational structure, development strategy, human resources, social responsibility and internal information transmission.

Business process level: sales management, project engineering, research and development, capital activities, procurement business, asset management, financial reporting, contract management, information system, etc. 4. High risk areas of focus mainly include:

Sales management, project engineering, procurement business, research and development, asset management, fund management and other matters. 5. The above units, businesses and matters included in the evaluation scope and high-risk areas cover the main aspects of the company’s operation and management. Is there any major omission □ yes √ No 6 Is there a statutory exemption

□ yes √ No 7 Other explanatory matters

nothing

(2) Basis of internal control evaluation and identification standard of internal control defects

The company organizes and carries out internal control evaluation according to the enterprise internal control standard system and the company’s current rules and regulations. 1. Whether the specific identification standard of internal control defects is adjusted with that of previous years

□ yes √ no

The board of directors of the company distinguished the internal control of financial report from the internal control of non-financial report according to the identification requirements for major defects, important defects and general defects of the enterprise internal control standard system, combined with the factors such as the company’s size, industry characteristics, risk preference and risk tolerance, and studied and determined the specific identification standards of internal control defects applicable to the company, which are consistent with the previous years. 2. Identification criteria for defects in internal control over financial reporting

The quantitative criteria for the evaluation of internal control defects in financial reporting determined by the company are as follows:

Index name major defect quantitative standard important defect quantitative standard general defect quantitative standard

If the amount of misstatement of operating revenue exceeds that of operating revenue, the amount of misstatement of operating revenue is less than 1% 0.5% but less than 1% 0.5%

If the misstatement amount of total assets exceeds the total assets, the misstatement amount of total assets is less than 1% 0.5% but less than 1% 0.5%

Note: the quantitative standard takes the operating income and total assets as the measurement indicators. If the loss that may be caused or caused by the defect of internal control is related to the income statement, it shall be measured by the operating revenue index. If the amount of misstatement in the financial report caused by the defect alone or in combination with other defects is less than 0.5% of the operating revenue, it is recognized as a general defect; If it exceeds 0.5% but less than 1% of the operating revenue, it is an important defect; If it exceeds 1% of the operating revenue, it is recognized as a major defect.

Losses that may be caused or caused by internal control defects related to asset management shall be measured by the total asset index. If the amount of financial report misstatement that may be caused by the defect alone or in combination with other defects is less than 0.5% of the total assets, it is recognized as a general defect; If it exceeds 0.5% but less than 1% of the total assets, it is recognized as an important defect; If it exceeds 1% of the total assets, it is recognized as a major defect.

The qualitative criteria for the evaluation of internal control defects in financial reporting determined by the company are as follows:

Qualitative standard of defect nature

Major defects (1) ineffective control environment; (2) Fraud by directors, supervisors and senior managers; (3) The external audit found that there were significant misstatements in the current financial report, and the company failed to find such misstatements in the process of operation; (4) The supervision of enterprise audit committee and internal audit institution on internal control is invalid; (5) Other major defects that may affect the correct judgment of report users.

Important defects internal control defects alone or together with other defects have reasonable possibility to prevent, detect and correct the misstatement in the financial report that does not reach or exceed the importance level, but should still attract the attention of the board of directors and management.

In addition to the above-mentioned major defects and control defects.

Note: none 3 Identification standard of internal control defects in non-financial reporting

The quantitative criteria for the evaluation of internal control defects in non-financial reporting determined by the company are as follows:

Index name major defect quantitative standard important defect quantitative standard general defect quantitative standard

If the amount of misstatement of operating revenue exceeds that of operating revenue, the amount of misstatement of operating revenue is less than 1% 0.5% but less than 1% 0.5%

If the amount of misstatement of total assets exceeds the total assets, the amount of misstatement exceeding the total assets is less than the total assets

1% 0.5% but less than 1% 0.5%

Note: the quantitative standard takes the operating income and total assets as the measurement indicators. If the loss that may be caused or caused by the defect of internal control is related to the income statement, it shall be measured by the operating revenue index. If the amount of misstatement in the financial report caused by the defect alone or in combination with other defects is less than 0.5% of the operating revenue, it is recognized as a general defect; If it exceeds 0.5% but less than 1% of the operating revenue, it is an important defect; If it exceeds 1% of the operating revenue, it is recognized as a major defect. Losses that may be caused or caused by internal control defects related to asset management shall be measured by the total asset index. If the amount of financial report misstatement that may be caused by the defect alone or in combination with other defects is less than 0.5% of the total assets, it is recognized as a general defect; If it exceeds 0.5% but less than 1% of the total assets, it is recognized as an important defect; If it exceeds 1% of the total assets, it is recognized as a major defect.

The qualitative criteria for the evaluation of internal control defects in non-financial reporting determined by the company are as follows:

Qualitative standard of defect nature

Major defects (1) unscientific decision-making procedures of the company, resulting in major decision-making mistakes and major property losses to the company;

(2) The company’s business activities seriously violate national laws and regulations;

(3) Serious loss of business personnel in key positions;

(4) The frequent exposure of negative media news has caused great damage to the company’s reputation;

(5) The results of internal control evaluation, especially major defects, have not been rectified;

(6) Important businesses lack institutional control or systematic failure, and lack effective compensatory control.

Important defects: (1) unscientific decision-making procedures of the company, resulting in errors of relative importance;

(2) The company is slightly punished for violating national laws and regulations;

(3) Serious loss of business personnel in general posts;

(4) Negative news in the media, affecting local areas;

(5) The results of internal control evaluation, especially the important defects, have not been rectified;

(6) There are defects in important business systems or systems.

General defects and other internal control defects that do not constitute major defects or important defects.

Note: none (III) Identification and rectification of internal control defects 1 Identification and rectification of internal control defects in financial reporting 1.1 Major defects

Whether the company has major defects in internal control over financial reporting during the reporting period □ yes √ no 1.2 Important defects

Whether the company has significant defects in internal control over financial reporting during the reporting period □ yes √ no 1.3 General defects □ yes √ no 1.4 After the above rectification, on the benchmark date of the internal control evaluation report, does the company have any major defects in the internal control of financial reporting that have not been rectified □ yes √ no

1.5. After the above rectification, on the benchmark date of the internal control evaluation report, whether the company has any important defects in the internal control of financial reporting that have not been rectified □ yes √ No 2 Identification and rectification of internal control defects in non-financial reporting 2.1 Major defects

Whether the company found any major defects in internal control over non-financial reporting during the reporting period □ yes √ no 2.2 Important defects

Whether the company found any significant defects in internal control over non-financial reporting during the reporting period □ yes √ no 2.3 General defects □ yes √ no 2.4 After the above rectification, on the benchmark date of the internal control evaluation report, does the company find any major defects in the non-financial reporting internal control that have not been rectified □ yes √ no 2.5 After the above rectification, on the benchmark date of the internal control evaluation report, whether the company finds any important defects in non-financial reporting internal control that have not been rectified □ yes √ no IV Description of other major matters related to internal control 1 Rectification of internal control defects in the previous year □ applicable √ not applicable 2 Operation of internal control in this year and improvement direction in the next year

√ applicable □ not applicable. In 2021, the company’s internal control was implemented effectively, and no major defects and important defects in internal control were found. In 2022, the company will continue to improve and improve the internal control system, standardize the implementation of the internal control system, strengthen the supervision, inspection and rectification of internal control, optimize the internal control environment, improve the level of internal control management, and strengthen the internal control management and effective prevention through the pre, in-process and post control of various risk matters

- Advertisment -