Every public-interest entity has an audit committee, stand-alone or within the administrative or supervisory body, made up of non-executive administrative members, supervisory members or members appointed by the general meeting. At least one member is competent in accounting or auditing, the members as a whole are competent in the entity's sector, a majority (including the chair, appointed by the members or the supervisory body) is independent of the entity, with national derogations for small issuers, subsidiaries meeting the requirements at group level, UCITS and alternative investment funds, pure asset-backed securities issuers (who explain publicly why no committee is appropriate), small unlisted credit institutions issuing only debt, entities with an equivalent body (which disclose it), and for the sustainability functions to be performed by the whole board or a dedicated body.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.