issues): · challenge of real time systems with large numbers and/or high value transactions (e.g. banks, travel agents); · unfamiliar systems and in-house expertise to assess them; · understanding and
Communications with relevant persons (7) Division 7 Cross-border communication (8) Division 8 Companies shall test and assess the BCP (Training, Exercising and Auditing) (9) Division 9 Examples of emergency
· Forms 2 Does the firm have policies and procedures for the retention of firm’s documentation for a period of time sufficient to permit those performing monitoring and review procedures to evaluate the
inspection to evaluate its compliance with its policies and procedures? – Monitoring Process If yes, please specify 1) Who perform such function e.g. in-house, outsource, network firm? 2) How often the firm
); (5) review procedures and processes in the management of information security incidents, after the testing under (4) is carried out, at least once a year; (6) evaluate the results of the testing under
internal control is rectified as follows: (1) monitor, inspect and evaluate the effectiveness of the operating procedures of the work unit responsible for the following functions by an independent auditor
approved by high-level management. In this case, such system shall; (a) generate good control environment; (b) assess, administer and manage any risks which arise or may arisen from conducting business to be
market product having high risk or complex characteristics shall comply with the regulations under Chapter 6; (7) receiving trading orders of capital market products outside the offices of intermediaries
associated companies. The information in this part shall be described in brief and the details thereof shall be disclosed in attachment; (5) Under-construction projects. (Only in case of high-value, time
well as specify the investment ratios and conditions for the fund to comply. Clause 12. The management company shall regularly evaluate the performance of the respective funds and disclose the