reference. PAGE 4 Notification of the Securities and Exchange Commission No. Kor Thor 18/2563 Re: Determination of Types of Financial Services of Person Approved to Participate in Regulatory Sandbox to

reference. PAGE 4 Notification of the Securities and Exchange Commission No. Kor Thor. 19/2563 Re: Determination of Types of Financial Services of Person Approved to Participate in Regulatory Sandbox to

Exchange Commission No. Kor Thor. 21/2563 Re: Determination of Types of Operation of Person Approved to Participate in Regulatory Sandbox to Experiment and Develop Innovation in Support of Service Provision

Practice Guidelines No. NorPor. 4/2559 Re: Practical Guidelines for Business Continuity Management _______________________________ Reference is made to the notification of the Capital Market Supervisory

. 43 FNotification of the Capital Market Supervisory Board No. Tor Nor. 1/2554 Re: Rules, Conditions and Procedures for Establishment and Management of Infrastructure Funds _____________ By virtue of

Contacts will develop their skills and knowledge. The Contacts may participate in either one or more of the following activities namely, (i) attending a training course or seminar organized in-house by a

of the Information Technology of a Securities Company. 2. Segregation of Duties. 3. Physical Security. 4. Information and Network Security. 5. Change Management. 6. Backup and IT Contingency Plan. 7

tables attached hereunder: “ intermediary ” means a securities company or a derivatives intermediary; “ fund management company ” means a securities company licensed to undertake securities business in the

attached hereunder: “ intermediary ” means a securities company or a derivatives intermediary. “ fund management company ” means a securities company licensed to undertake securities business in the category

Operating Results 1. Organizational structure and operation of the group of companies 3 2. Risk management 12 3. Business sustainability development 13 4. Management discussion and analysis (MD&A) 17 5