Re: Operational Control and Information Technology Security of Securities Companies Whereas in these days securities companies widely accept information technology as an instrument for securities

of Contents Page 1. Audit Firm profile 1 2. Network firms of the Audit Firm 4 3. Internal management of the Audit Firm 5 4. Inspection results on quality control system by other agencies (if any) 5 5

systems are developed or changed; (6) control people, processes, and technology associated with the development of information systems to ensure information security across the entire development lifecycle

for acknowledge and control to comply . [A] 2. Controlling the development or alteration the operational system 2.1 Request. · A request for development or alteration the operational computer system

Cryptographic Control; 2.7 Physical and Environmental Security; 2.8 Operations Security; 2.9 Communications Security; 2.10 System Acquisition, Development and Maintenance; 2.11 IT Outsourcing; 2.12 Information

comprising of, at least, the following particulars: (1) organisational structure of the company; (2) availability of competent personnel; (3) fund management operation system; (4) internal control system

Operating Results 1. Organizational structure and operation of the group of companies 3 2. Risk management 12 3. Business sustainability development 13 4. Management discussion and analysis (MD&A) 17 5

Summary Part 2 The Issuer 2.1 Objectives of the fund 2.2 Business operation 1. Policy and overview of business operation 2. Nature of business operation 3. Risk factors 4. Research and development 5. Assets

. Corporate social responsibility 11. Internal control and risk management 12. Related transactions Part 3: Financial Position and Operating Results 13. Significant financial information 14. Management

procedure; (10) The Financial Institutions Development Fund; (11) The Government pension fund; (12) Mutual funds under the securities and exchange law; (13) Juristic persons with investment fund of Baht one