นโยบายการรักษาความปลอดภัยด้านเทคโนโลยีสารสนเทศ (IT security policy) PAGE - 2 - ประกาศสำนักงานคณะกรรมการกำกับหลักทรัพย์และตลาดหลักทรัพย์ ที่ อธ./น. 5/2547 เรื่อง แนวทางปฏิบัติในการควบคุมการปฏิบัติงาน

นโยบายการรักษาความปลอดภัยด้านเทคโนโลยีสารสนเทศ (IT security policy) เอกสารประกอบการ public hearing ร่างข้อบังคับและแนวทางปฏิบัติด้านเทคโนโลยีสารสนเทศ PAGE - 30 - เอกสารประกอบการ public hearing ร่าง

enterprise information technology and operating systems for information security; (2) supervision, monitoring and examinaion of compliance with the policies, measures and the operating systems under (1); (3

derivatives contracts; “Foreign derivatives business operator” means any person undertaking derivatives business under the law of foreign country and under supervision of authority or agency which regulates

intermediary ; “ executive ” means a manager and a person responsible for control, supervision and management of the business units relating to investment advice, investment planning, analysis of investment or

private fund shall have prior granted a written approval [for such outsourcing], as the case may be; (b) there shall be a report on supervision of another intermediary and reveal the report in the annual

shares or rendering a financial support that will later generate the right to acquire shares of such business, and being involved in the supervision of the business plan, the operation or the improvement

for Operational Supervision of Securities Underwriting dated 25 October 2006; (3) The second paragraph of Clause 2 of the Notification of the Securities and Exchange Commission No. KorThor. 5/2539 Re

with Chapter 1; (2) establishment of policies, measures, and management arrangement concerning information security in accordance with Chapter 2; (3) management of IT assets and the access control to

daily status report to the SEC Office in an excel file via email within the next business day of the daily transactions (T+1) for the benefit of prudential supervision which is important and can have an