information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information

intermediary’s information cannot be recovered; (12) a clear term for subcontract of the cloud computing service should be in place. The term should provide, at a minimum, that such subcontracting is a part of the

its business rehabilitation or operational plan has not been approved by the regulatory agency of such financial institution or the Board of the Financial Restructuring Authority (FRA), or which has

responsible for the damage occurring to the financial institution whose license has been revoked, or business has been controlled or operation has been ceased due to the rehabilitation plan was not approved by

shareholders’ meeting resolution of the securities issuer; 3. a creditor of a securities issuer according to the rehabilitation plan approved by the court under the bankruptcy law or the debt restructuring

be recovered, such customer shall be entitled to file a claim for the deficient amount in the bankruptcy proceedings where the derivatives business operator is the debtor. Such claim shall, however, be