. (Acceptance and Continuance of Client Relationships and Specific Engagements) 5. (Resources) 6. (Engagement Performance) 7. (Information and Communication) 8. (Monitoring and Remediation Process)

system by the Audit Firm (internal monitoring) (1) Name of inspecting unit…………………………………………………………… (2) Period of inspection.……………………………………………………… ……… (3) Scope of inspection (3.1) Audit engagements level

enterprise information technology and operating systems for information security; (2) supervision, monitoring and examinaion of compliance with the policies, measures and the operating systems under (1); (3

Engagements) (1) (1) 4 (Human Resources) ( ) ( ) 5 (Engagement Performance) (2) ( ) 6 (Monitoring) (1) (2) 100 .20 65 2 KPMG KPMG AQIs 2 KPMG KPMG 2 KPMG KPMG KPMG KPMG KPMG KPMG KPMG KPMG 108 31 2564 5.60

) 4 (Human Resources) ( ) ( ) 5 (Engagement Performance) (2) ( ) 6 (Monitoring) (1) (2) 100 .20 85 2 EY data analytic tools EY EY EY EY EY EY EY EY EY 211 30 2564 6.41 35 EY 3 3 1 (Leadership

(Engagement Performance) (2) ( ) 6 (Monitoring) (1) (2) 100 .20 50 - 2 - 10 technical committee 5 31 2565 17,698 0.09 3 3 1 (Leadership Responsibilities for Quality within the Firm) 3 2 (Relevant Ethical

business operation. Meanwhile, Senior Management ensures that policies, processes and systems for controlling, monitoring and reporting risks and capital are in place whereas segregation of duties and

and risks of organizations that will link their systems to ours. Duties and responsibilities are clearly defined in the contract entered into with those organizations, while risk-monitoring measures

operation. Meanwhile, KBank ensures that policies, processes and systems for controlling, monitoring and reporting risks, capital and liquidity are in place whereas segregation of duties and reporting lines

authorized auditors. Sincerely yours, VAROPAKORN PUBLIC COMPANY LIMITED (Mr. Sahasee Chitanondh) Managing Director CC. Corporate Monitoring Department, The Securities and Exchange Commission