evaluation by the SEC Office regarding the management of the operational risk and the customer relationship risk not higher than the medium level or in an acceptable level, unless granted an exemption from the

record of audio tape or electronic storage medium thereof shall be kept by the derivatives agent. (2) Records of the details of transaction executed for its customers, confirmation statement, evidence of

medium thereof shall be kept by the derivatives broker . (2) records of the details of transactions executed for its customers, confirmation statement, evidence of margin call, account of derivatives

Companies shall conduct an assessment on risks and possibility of major operational disruptions by assessing on an emergency incident, which causes a disruption and business impacts in either short, medium or

persistent threat (APT), the network segregation, the application-to-application encryption, defense-in-depth and the network hardening; (4) define a clear set of controls including access control, monitoring

โจมตีในลักษณะ DDoS (distributed denial of service) การป้องกันการบุกรุกจากโปรแกรมไม่ประสงค์ดี การป้องกันภัยคุกคามในรูปแบบใหม่ (advanced persistent threat) การแบ่งแยกเครือข่าย การเข้ารหัสระหว่างแอพพลิเคชั่น