) having exhaustively comprehensive risk management of which preventive measures and arrangement shall be adequate and effective; (7) having systems and measures for preventing conflict of interests at least

personnel’s performance]; (5) having efficient internal audit and control system; (6) having exhaustively comprehensive risk management of which preventive measures and arrangement shall be adequate and

No. Tor Thor. 35/2556 Re: Standard Conduct of Business, Management Arrangement, Operating Systems, and Providing Services to Clients of Securities Companies and Derivatives Intermediaries dated 6

Operating Results 1. Organizational structure and operation of the group of companies 3 2. Risk management 12 3. Business sustainability development 13 4. Management discussion and analysis (MD&A) 17 5

. Assets 5. Legal disputes 6. General information and other material facts Part 2: Management and Corporate Governance 7. Securities and shareholders 8. Organizational structure 9. Corporate governance 10

used in business operation 6. Future projects 7. Legal disputes 8. Other important information 2.3 Management and corporate governance 9. Information on securities and shareholders 10. Management