been a change in the necessary circumstances as provided in the first paragraph, the Minister upon the recommendation of the SEC may modify or change the conditions already specified.

· Forms 2 Does the firm have policies and procedures for the retention of firm’s documentation for a period of time sufficient to permit those performing monitoring and review procedures to evaluate the

inspection to evaluate its compliance with its policies and procedures? – Monitoring Process If yes, please specify 1) Who perform such function e.g. in-house, outsource, network firm? 2) How often the firm

institution, the securities company may comply with the policy of security of the information technology of such financial institution. [M] · Reviewing and modify updatable by having a risk assessment once a

modify the rules concerning the preparation of reports on provident fund management and the calculation of investment limits of provident funds in respect of the provident funds with multiple investment

, there shall not be any person taking responsibility of the entire process which may render him or her an opportunity to illegally modify or amend the information or operation of computer system. Clause 5

. In the case where it is appropriate or necessary, the SEC Office upon approval of the SEC may revise or modify the operating plan; in such regard, the provision in the first paragraph shall be

, how does the firm inform its personnel or what kind of process that the firm use to ensure that its staff evaluate clients risk? 5 Regarding integrity checks does the firm’s conduct, for example

); (5) review procedures and processes in the management of information security incidents, after the testing under (4) is carried out, at least once a year; (6) evaluate the results of the testing under

substitute personnel at operational level and management level, financing source, office equipments and information technology systems, as well as, should evaluate on a usage of finance and accesibility to