Exchange Commission No. SorThor. 20/2549 Re: Rules for Derivatives Broker on Using of Derivatives Investor Contact Service and Back Office Service from Service Provider By virtue of Clause 27/1 of the

the Office of the Securities and Exchange Commission No. SorThor. 20/2549 Re: Rules for Derivatives Broker on Using of Derivatives Investor Contact Service and Back Office Service from Service Provider

of the subcontracted cloud provider on information security aspect which are comparable to those of the cloud provider or meet the international standards; (c) monitoring, evaluation, and review of the

of the subcontracted cloud provider on information security aspect which are comparable to those of the cloud provider or meet the international standards; (c) monitoring, evaluation, and review of the

of the subcontracted cloud provider on information security aspect which are comparable to those of the cloud provider or meet the international standards; (c) monitoring, evaluation, and review of the

guideline for risk assessment according to the degree of importance of the outsourced function; (6) information security system of a service provider for protecting the information of the intermediary and the

assessment according to the degree of importance of the outsourced function; (6) information security system of a service provider for protecting the information of the intermediary and the clients; 5 Clause 9

assessment according to the degree of importance of the outsourced function; (6) information security system of a service provider for protecting the information of the intermediary and the clients; 5 Clause 9

) appropriate guideline for risk assessment according to the degree of importance of the outsourced function; (6) information security system of a service provider for protecting the information of the

the case may be. “support system provider”4 means a person approved to be a support system provider under the notification concerning support system provider. “support system”4 means support system