information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information

UNOFFICIAL TRANSLATION Readers should be aware that only the original Thai text has legal force and that this English translation is strictly for reference. 30 Notification of the Office of the Securities and Exchange Commission No. Nor Por. 3/2559 Re: Guidelines for Establishment of Information Technology System ______________________ Whereas the Notification of the Capital Market Supervisory Board No. Tor Thor. 35/2556 Re: Standard Conduct of Business, Management Arrangement, Operating Systems...

…………………………….… Seal (If any) Remarks : 1. The applicant may duplicate this application and fill in the content instead of using this form. 2. Signatures required in the genuine application form and documentary

preserved information media and duplicate the procedure or compliance guideline in other place for security in case of he operational place damaged and providing the entrance controlling and damage prevention