otherwise entitled. Clause 3 Intermediaries shall identify its critical functions, assess their risks of major operational disruptions, conduct business impact analysis and assess potential damages arising
securities company shall identify its critical functions, assess their risks of major operational disruptions, conduct business impact analysis and assess potential damages arising from major operational
Communications with relevant persons (7) Division 7 Cross-border communication (8) Division 8 Companies shall test and assess the BCP (Training, Exercising and Auditing) (9) Division 9 Examples of emergency
which covers the methods for selection and evaluation of cloud providers, review of the qualifications of the cloud providers, the terms of services, and inspection of records and evidence; (2) policy on
units in order to achieve efficiency in the overall operation of the company. (4) have performance appraisal and personnel development in order to maintain staff’s professional competence to remain fit
during the period of providing services: (1) compile and assess the information of the service-receiving client for the following purposes: (a) to know the client; (b) to categorize the client; (c) to
following actions during the period of providing services: (1) compile and assess the information of the service-receiving client for the following purposes: (a) to know the client; (b) to categorize the
documented information security policy which addresses at least the following matters: (1) policy on the use of cloud computing which covers the methods for selection and evaluation of cloud providers, review
objective in undertaking fund management business for short and long term. Objective should be set for the short-term plan and criteria/factor for evaluation of the accomplishment of the plan should be
directors of subsidiaries Attachment 3: Details of the Heads of the Internal Audit and Compliance Units Attachment 4: Assets for business undertaking and details of asset appraisal Attachment 5: Unabridged