Audit Committee Requirements for Hong Kong Listed Companies: Setup and Operation

The SFC’s 2024 consultation on proposed enhancements to the Code of Corporate Governance and the HKEX’s corresponding Listing Rule amendments, expected to be codified in the 2025-2026 rulebook cycle, have placed the audit committee under a more intense operational microscope. No longer a mere compliance checkbox, the committee is now the primary gatekeeper for financial reporting integrity, internal controls, and risk management oversight, with the regulator explicitly targeting its independence, resourcing, and effectiveness. For a company preparing for a Main Board or GEM listing, the audit committee’s structure is not a post-IPO afterthought; it is a pre-listing condition that must be demonstrably functional from the date of listing. This article unpacks the exact Listing Rule requirements for composition, qualification, and independence, then moves to the operational mechanics—charter drafting, meeting cadence, and the critical relationship with the external auditor. It concludes with the specific, actionable steps a pre-IPO issuer must take to ensure its audit committee is not merely compliant, but credible in the eyes of the HKEX and the investing public.

Composition and Qualification Requirements Under the Listing Rules

The HKEX Listing Rules mandate a specific structure for the audit committee, with distinct requirements for Main Board and GEM issuers. Rule 3.21 of the Main Board Listing Rules and Rule 5.28 of the GEM Listing Rules are the primary governing provisions, and any deviation from these requirements must be explicitly justified in the prospectus.

Minimum Membership and Independence Thresholds

The audit committee must comprise a minimum of three members, all of whom must be non-executive directors. This is a non-negotiable baseline. The critical distinction lies in the independence requirement: under Main Board Rule 3.21, a majority of the audit committee members must be independent non-executive directors (INEDs). For GEM issuers, Rule 5.28 imposes the same majority requirement. However, the HKEX’s 2024 consultation paper, “Proposed Enhancements to the Corporate Governance Code and Listing Rules,” signals a clear trajectory toward requiring the entire committee to be composed of INEDs, a standard already applied in several major jurisdictions. While not yet mandatory, any issuer appointing a non-independent non-executive director to the committee must be prepared to articulate a compelling rationale to the Exchange.

The Financial Literacy Mandate

Beyond independence, the Listing Rules impose a specific qualification requirement. At least one member of the audit committee must possess appropriate professional qualifications or accounting or related financial management expertise. This is defined under Main Board Rule 3.10(2) and GEM Rule 5.05(2) as holding a recognized professional accounting qualification (e.g., CPA, ACCA, HKICPA) or equivalent experience. The HKEX has clarified in its guidance letters that “experience” is not a substitute for qualification; the designated member must demonstrably have a track record of financial oversight, typically at a senior level (CFO, financial controller, audit partner). The prospectus must name this member and explicitly state the basis for their financial literacy designation. Failure to do so is a common deficiency flagged during the HKEX’s pre-listing vetting process.

Prohibition on Service on Multiple Committees

A less obvious but operationally significant constraint is the prohibition on a single INED serving as the chairperson of both the audit committee and the remuneration committee, or the nomination committee, simultaneously. This is codified in the Corporate Governance Code (Code Provision A.2.1 for Main Board, Code Provision A.2.1 for GEM). The rationale is to prevent an excessive concentration of power and to ensure each committee receives dedicated attention. For a pre-IPO issuer with a small board, this often forces a difficult trade-off: the same highly qualified INED cannot chair both critical committees. The company secretary must plan the committee composition well in advance of the listing application to avoid last-minute reshuffling.

Operational Mechanics: Charter, Meetings, and Reporting

A compliant composition is the foundation, but the operational framework is what the HKEX scrutinizes during the listing hearing. The audit committee must be demonstrably active, not merely existent on paper.

The Audit Committee Charter: A Mandatory Document

The committee must operate under a written terms of reference, or charter, that is approved by the board and reviewed annually. Main Board Rule 3.22 and GEM Rule 5.29 require this charter to specify the committee’s authority, duties, and responsibilities. The HKEX provides a model charter in Appendix 14 of the Main Board Rules, but issuers should customize it to reflect their specific business risks and industry practices. The charter must explicitly delegate the following powers: (a) to investigate any activity within its terms of reference, (b) to seek any information it requires from any employee, (c) to obtain independent legal or other professional advice, and (d) to secure the attendance of outsiders with relevant expertise at its meetings. A charter that merely replicates the model without these specific delegations will be considered deficient.

Meeting Frequency and Quorum

The Listing Rules do not prescribe a specific minimum number of meetings per year, but the Corporate Governance Code (Code Provision C.3.3) recommends at least four meetings per year, ideally timed to coincide with the quarterly financial reporting cycle. For a pre-IPO issuer, the committee should meet at least twice during the pre-listing period: once to review the draft prospectus financials and once to interview the proposed external auditor. The quorum for an audit committee meeting is two members, of whom at least one must be an INED. Minutes of all meetings must be kept and made available for HKEX inspection upon request. A common deficiency in listing applications is the absence of minutes demonstrating the committee’s active review of the internal control report and the auditor’s management letter.

The External Auditor Relationship

The audit committee’s most critical operational function is its direct line of communication with the external auditor. Under Main Board Rule 3.24 and GEM Rule 5.31, the committee is responsible for making recommendations to the board on the appointment, reappointment, and removal of the external auditor, and for approving the auditor’s remuneration and terms of engagement. This relationship must be structured to ensure the auditor reports directly to the committee, not to management. The committee must meet with the auditor without the presence of executive management at least once per year. This “private session” is a non-negotiable expectation of the HKEX and is a common point of inquiry during the listing hearing. The minutes of this private session must be recorded, but the content is typically privileged and not disclosed in the prospectus.

Pre-Listing Audit Committee: A Distinctly Different Phase

The audit committee for a pre-IPO issuer operates under a fundamentally different set of constraints compared to a post-listing committee. The sponsor, the reporting accountant, and the legal advisers are the dominant actors, and the committee’s role is more about oversight of the listing process than ongoing financial reporting.

Composition Challenges Before Listing

A pre-IPO issuer often has a small board dominated by founder-executives. Finding three INEDs who meet the independence criteria under Listing Rule 3.13 (which includes tests for business relationships, financial interests, and tenure) can be difficult. The HKEX requires that INEDs be appointed before the listing application is submitted, and their independence must be confirmed in the prospectus. A common strategy is to appoint a retired audit partner from a Big Four firm as the financial expert member, and two other professionals (e.g., a lawyer, a banker, a former regulator) as the other two INEDs. The issuer must ensure that none of these individuals have any prior business or family relationship with the controlling shareholders, directors, or senior management, or the HKEX will reject the application.

The Pre-Listing Audit Committee’s Work Program

Between the appointment of the sponsor and the listing date, the audit committee must undertake a specific work program. This includes: (a) reviewing the sponsor’s internal control review report and the management’s remediation plan, (b) approving the appointment of the reporting accountant (typically the same firm as the external auditor), (c) reviewing the draft prospectus for any material misstatements or omissions in the financial disclosures, and (d) assessing the independence of the external auditor in light of any non-audit services provided. The committee must document these reviews in formal minutes. A failure to produce these minutes is a red flag for the HKEX’s Listing Division.

The Role of the Company Secretary

The company secretary is the operational backbone of the pre-listing audit committee. Under Listing Rule 3.28, the company secretary must be a person who, in the opinion of the HKEX, possesses the requisite knowledge and experience to discharge the functions of a company secretary. This individual is responsible for scheduling meetings, preparing agendas, circulating board papers (including the audit committee charter, the internal control report, and the auditor’s management letter), and drafting minutes. The company secretary must ensure that all committee members receive the relevant materials at least three days before the meeting, a requirement often codified in the charter. For a pre-IPO issuer, the company secretary is typically a professional from a corporate services firm with direct experience in HKEX listing applications.

Risk Management and Internal Controls Oversight

The audit committee’s mandate extends beyond financial reporting to encompass the entire system of internal controls and risk management. This is explicitly stated in the Corporate Governance Code (Code Provision C.2.1 for Main Board, Code Provision C.2.1 for GEM), which requires the board to present a statement in the annual report on the effectiveness of the internal control and risk management systems.

The Internal Control Review

Before listing, the sponsor must engage an independent party (usually a Big Four firm or a specialist risk consultancy) to conduct an internal control review. The audit committee must receive this report and review management’s response and remediation plan. The committee must satisfy itself that all material control deficiencies have been addressed or that a timeline for remediation is in place. The HKEX will not approve a listing application if there are unresolved material weaknesses in internal controls over financial reporting. The committee must document its review and approval of the remediation plan in the minutes.

Whistleblowing and Fraud Prevention

The Corporate Governance Code (Code Provision D.2.6 for Main Board, Code Provision D.2.6 for GEM) requires the audit committee to establish a whistleblowing policy that allows employees and other stakeholders to raise concerns, in confidence, about possible improprieties in matters of financial reporting, internal controls, or other matters. The committee must ensure that the policy is communicated to all employees and that a mechanism (e.g., a dedicated email address or a third-party hotline) is in place for reporting. The committee must review the effectiveness of this policy annually. For a pre-IPO issuer, implementing this policy is a practical step that demonstrates a commitment to good governance.

The Annual Internal Audit Function

While not mandatory for all issuers, the Corporate Governance Code (Code Provision C.2.4 for Main Board, Code Provision C.2.4 for GEM) recommends that the board establish an internal audit function. The audit committee is responsible for overseeing this function, including approving the internal audit charter, the annual audit plan, and the budget. If the issuer does not have an internal audit function, the board must disclose the reasons in the annual report. For a pre-IPO issuer, establishing an internal audit function—even if outsourced to a third-party provider—is a strong signal to the HKEX that the company takes its governance obligations seriously.

Actionable Takeaways for the Pre-IPO Issuer

1. Appoint three INEDs to the audit committee at least six months before the listing application submission, ensuring at least one holds a recognized professional accounting qualification and that all members pass the independence tests under Listing Rule 3.13.
2. Draft a bespoke audit committee charter that explicitly delegates the powers to investigate, seek independent advice, and secure attendance of outsiders, and have it approved by the board before the sponsor’s due diligence commences.
3. Hold at least two pre-listing audit committee meetings—one to review the internal control report and remediation plan, and one to interview the proposed external auditor—and document both in formal minutes.
4. Establish a whistleblowing policy and a confidential reporting mechanism before the prospectus is filed, and ensure the audit committee formally reviews the policy’s effectiveness.
5. Engage a professional company secretary with direct HKEX listing experience to manage the audit committee’s calendar, board papers, and minute-taking, ensuring compliance with the three-day advance circulation requirement.