rules, conditions and procedures as specified in the notification of the Capital Market Supervisory Board by failing to put in place sufficient and effective exhaustively comprehensive risk management