Additional Rules for Proprietary Trading of Securities Companies __________________________ Division 1 Rules on Investment _______________ Clause 7 An operating system supervising the proprietary trading of a

audit firm, hereby certify and consent to the followings: 1. I certify that the audit firm has audit quality control system which is sufficient and reliable for supervising its auditors’ work to comply

control system which is sufficient and reliable for supervising its auditors’ work to comply with the professional standards on a continuous basis. Such audit quality control system complies with

approval of the Office of the Securities and Exchange Commission Name Position Managing power Independence Full time (with / without) (yes / no) (yes / no

regulatory sandbox ; (b) assessing and managing potential risks from the operation; (c) having operational procedures and an internal control system with details covering the operation specified in Clause 4

be, as prescribed in this Notification: (1) managing, determining, controlling and supervising business policy of an intermediary ; (2) controlling, supervising and managing business units relating to

that the operation of the securities company follows laws on securities and exchange and notifications issued by virtue of such laws. In performing duty in supervising the securities company under the

characteristics, or obtain an approval [from the SEC Office], as the case may be, as prescribed in this Notification: (1) managing, determining, controlling and supervising business policy of an intermediary ; (2

person who is responsible for supervising the investigation · Has sufficient and appropriate experience · Has authority within the firm ; and Is otherwise not involved in the engagement? 112

person responsible for managing information security incidents; (3) report any information security events to the responsible person under (2) and the SEC Office without delay; (4) carry out testing of