intermediary’s information cannot be recovered; (12) a clear term for subcontract of the cloud computing service should be in place. The term should provide, at a minimum, that such subcontracting is a part of the

supervisor in business management. Clause 2 In order to ensure that critical function of intermediaries will continue or be restored in a timely manner in the event of disruption of its normal operations

management for business continuity of securities companies pursuant to this Notification. Clause 3. In order to ensure that critical functions of a securities company will continue or be restored in a timely

use in solving problems, on which companies shall inform its responsible officers. Also, when critical business functions have been restored to normal, companies shall notify the SEC to acknowlege as

information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information