information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information
least once every six months; (5) prevent previously used passwords; (6) not display passwords on the screen while being entered; (7) store password files in encrypted form and keep them separately from
, having obtained an approval from the SEC Office, determined by the securities company association . Clause 3 A business operator shall prepare and store any document or evidence relating to investment in
securities’ proceeding to solve a problem. (4) proceed with the complaint in Clause 3 and Clause 4; (5) store evidentiary documentation involving the complaint and proceeding for no less than two years from
premises with other people, the management company shall proceed as follows: (1) arrange to have space for the branch office to serve customers and to store documents separated from space that other people
. for the purpose of compliance convenience and render efficiently controlling for accessing the importance computer devices. Moreover, it should be separate the zone that officer from various division