information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information

been a change in the necessary circumstances as provided in the first paragraph, the Minister upon the recommendation of the SEC may modify or change the conditions already specified.

แบบแสดงราการข้อมูลประจำปี Notification of the change of the audit firm Date..... .........................…. Dear Secretary General of the Securities and Exchange Commission of Thailand I would like

intermediary’s information cannot be recovered; (12) a clear term for subcontract of the cloud computing service should be in place. The term should provide, at a minimum, that such subcontracting is a part of the

แบบแสดงราการข้อมูลประจำปี UNOFFICIAL TRANSLATION Notification of the Change of Audit Firm Date ....... Month ............ Year ....…. Dear Secretary-General of the Office of the Securities and

necessity prior to the end of such period of time. Clause 4. In the case where there appears later a change of any material information provided in the application filed with the Office, the securities

Thai) : Title First Name Last name First name / Last name (in English) : Title First Name Last name Former First name / Last name (if any) (in Thai) Title First Name Last name Date of Change Former First

be recovered, such customer shall be entitled to file a claim for the deficient amount in the bankruptcy proceedings where the derivatives business operator is the debtor. Such claim shall, however, be

of the Information Technology of a Securities Company. 2. Segregation of Duties. 3. Physical Security. 4. Information and Network Security. 5. Change Management. 6. Backup and IT Contingency Plan. 7

such change to the SEC Office within seven days from the effective date of the change specifying therein the effective date of such change. Clause 3. The SEC Office shall notify the derivatives business