retrieved and inspected by the SEC Office. The securities company shall maintain reports or articles on securities investment analysis for at least two years from the publication date in such a manner that

which can be promptly retrieved and inspected by the Office, and the securities company shall maintain the reports or articles on securities investment analysis for at least two years from the publication

date on which the information was recorded in the system. In this regard, during the first two years it shall be kept in a manner that is able to be retrieved promptly and inspected by the SEC. Clause 5

information security; (3) define the recovery time objective (RTO) for information system and its priority to be recovered based on its criticality and potential impact; (4) consider redundant information

intermediary’s information cannot be recovered; (12) a clear term for subcontract of the cloud computing service should be in place. The term should provide, at a minimum, that such subcontracting is a part of the