intermediary’s information cannot be recovered; (12) a clear term for subcontract of the cloud computing service should be in place. The term should provide, at a minimum, that such subcontracting is a part of the

information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information

supervisor in business management. Clause 2 In order to ensure that critical function of intermediaries will continue or be restored in a timely manner in the event of disruption of its normal operations

management for business continuity of securities companies pursuant to this Notification. Clause 3. In order to ensure that critical functions of a securities company will continue or be restored in a timely

the reasons why such qualifications cannot be maintained within the next business day following the date when such qualifications fail to be maintained and when such qualifications are regained, such

use in solving problems, on which companies shall inform its responsible officers. Also, when critical business functions have been restored to normal, companies shall notify the SEC to acknowlege as