นโยบายการรักษาความปลอดภัยด้านเทคโนโลยีสารสนเทศ (IT security policy) PAGE - 2 - ประกาศสำนักงานคณะกรรมการกำกับหลักทรัพย์และตลาดหลักทรัพย์ ที่ อธ./น. 5/2547 เรื่อง แนวทางปฏิบัติในการควบคุมการปฏิบัติงาน

นโยบายการรักษาความปลอดภัยด้านเทคโนโลยีสารสนเทศ (IT security policy) เอกสารประกอบการ public hearing ร่างข้อบังคับและแนวทางปฏิบัติด้านเทคโนโลยีสารสนเทศ PAGE - 30 - เอกสารประกอบการ public hearing ร่าง

appoint competent officers to perform duties in accordance with this Act. Such ministerial regulations shall come into force upon publication in the Government Gazette.

security as well as supervise, monitor and examine compliance with such policies, measures, and operating systems, and review the suitability thereof regularly; In the interest of meeting the aforesaid

. “registrar” means a person appointed by the Minister to be the Registrar of provident funds. “competent official” means a person appointed by the Minister to execute the duties in accordance with this Act

establishing and managing Yes No the representative office abroad. 3.3 Having a ready working system comprising at least operational Yes No management, compliance and information management, and competent

market conduct; (6) competent staff readiness An intermediary shall provide the competent personnel with the suitable amount for the business operation, and shall supervise its personnel to perform duties

with Chapter 1; (2) establishment of policies, measures, and management arrangement concerning information security in accordance with Chapter 2; (3) management of IT assets and the access control to

control and information technology security as specified in the notification of the SEC Office. Clause 8. Derivatives broker shall arrange to have independent director of at least one out of four directors

: Operational Control and Security for Information Technology of a Licensed Derivatives Broker. By virtue of the second paragraph of Clause 7 of the Notification of the Securities and Exchange Commission No