Stablecoin issuers must, at least once a year, draw up an internal audit plan on the basis of the annual internal audit control objectives. The internal audit plan must be approved by the board or relevant board committee.