for risk controlling [M] o Keeping a written policy of security in the place where the user and the concerned person can simply reach [M] 2. Detail of Policy o Identifying clearly the purpose and scope

such board of directors; (1) management of information technology risks which covers identification, assessment, and control of risks within the organization’s acceptable level; (2) allocation and

by such board of directors; (1) management of information technology risks which covers identification, assessment, and control of risks within the organization’s acceptable level; (2) allocation and

by such board of directors; (1) management of information technology risks which covers identification, assessment, and control of risks within the organization’s acceptable level; (2) allocation and

 Privacy Policy Personal Data Protection Policy for Fundraising The Office of the Securities and Exchange Commission (SEC Office) 0. Scope of this Policy This Personal Data Protection Policy applies

 Privacy Policy Personal Data Protection Policy for Business Operators The Office of the Securities and Exchange Commission (SEC Office) 0. Scope of this Policy This Personal Data Protection Policy

sufficient clarity to enable the identification and assessment of risks relating to objectives. Questions Yes No 6.1 The company is able to comply with the generally accepted accounting principles which is

accounting principles. Moreover, the auditor was unable to find sufficient supporting evidence to satisfy the audit procedures due to limitation on scope of audit imposed by the PICNI management in various

must be within the scope agreed by the clients in advance, in order to expand the service scope of the business operators and meet the investors’ requirements in a more comprehensive and convenient

satisfy the audit procedures due to limitation on scope of audit imposed by the PICNI management in various matters including inability to obtain certification from the company?s management regarding