(UNOFFICIAL TRANSLATION) 4 (SEC Logo and contact information) 30 November 2016 Dear Managers: All securities companies All derivatives brokers No. SEC. Nor Por. (Wor) 30/2559 Re: Submission of Daily

UNOFFICIAL TRANSLATION (SEC logo and contact information) 8 August 2014 To Managers Securities companies Asset management companies Derivatives intermediaries No. Kor Lor Tor. Kor Thor. (Wor) 23/2557

business continuity plan (Business Continuity Plan: BCP) which is consistent with the policy stipulated in (1) approved by senior management and board of directors or working group that is assigned in

representative office abroad .................................................................................................................................................... 3.2 Having a work plan for

undertaking; and; (c) allow its business to be conducted with fiduciary duties. (2) determine clearly and harmoniously the mission, strategy, policy and operational plan of the company and its business units

plan covering all critical functions which at minimum shall include the following components: (1) Operational procedures for maintaining or recovery of business operations which contain sufficient

of Intermediary to Handle Clients’ Complaints and participation in the SEC Office’s project to resolve disputes by arbitration. 4.3 Having a business plan and an operating system for establishing a

and reports as well as a backup system and an emergency plan for recovering information stored in an electronical form; (2) determining a password to access information stored in an electronic form and

of the Information Technology of a Securities Company. 2. Segregation of Duties. 3. Physical Security. 4. Information and Network Security. 5. Change Management. 6. Backup and IT Contingency Plan. 7

services to clients with details covering the operation specified in Clause 5; (d) having a plan to report the results of the experiment and progress of service provision to the SEC Office on a continuing