Page 156 - BAM ONE REPORT 2564 (ENGLISH VERSION)

154 Part 2
Corporate Governance

master plan has been devised with a view to tools and procedures for risk management in order to
streamlining the business processes, ranging from the cushion against risks which tend to increase in line with
process which is the business foundation to the various risk factors, as well as aligns its risk management
customer contact and service process, and also with the changing regulations of the authorities and the
improving cyber security to enhance work efficiency. supervising agency.
Moreover, innovations for data use are promoted in
order for the Company to become an organization with Amid the global COVID-19 crisis that erupted in
data-driven decision making. The Board of Directors also early 2020 and started to affect Thailand in March, the
gives importance to cultivating among the Company’s Company continuously keeps abreast of the situation
employees the open-mindedness for changes and and assigns the Business Continuity Management (BCM)
creative innovations that can be used for linking the Working Group, which consists of its top executives, to
Company’s goals and its ability to answer the demands urgently devise measures and prepare a business
of its customers and society evenly. continuity plan (BCP) to cope with the COVID-19 crisis. In
this respect, the Company adopts the guideline for
Guideline 5.2 Resource allocation and COVID-19 infection prevention established by the
management Department of Disease Control, Ministry of Public
The Board of Directors monitors and supervises Health, for use in the organization, as follows:
the Company’s resource management to ensure that - Announce the guidelines for the employees
the Company will manage its resources efficiently and to prevent the spread of the COVID-19.
effectively, taking into account the potential effects and - Prepare the BCP to prioritize the significant
the resource development, which includes its employees, types of work in four phases of the pandemic:
business partners, customers, and stakeholders. Phase 1 Pre-Pandemic; Phase 2 Alert; Phase
3 Pandemic; and Phase 4 Post-Pandemic.
Guideline 5.3 Information system security policy - Designate the screening points at the
entrance/exit of the office buildings.
The Board of Directors defines the Company’s - Spray disinfectants in all areas of the Head
information system security policy in order to safeguard Office and branch offices throughout the
the Company’s information system and ensure that the country.
Company’s information system will be well managed - Formulate the practice guides for employees
and supervised with great efficiency in accordance with in case there are persons found to contract
the provisions of the law and the Notification of the COVID-19 within the office building.
Electronic Transactions Commission on Policy and - Establish BAM Isolation Unit at De Val Resort
Practice Guideline on Maintenance of Information in Nakhon Nayok Province to accommodate
Security of Government Agencies B.E. 2553, based on the COVID-19 infected employees who show
the ISO/IEC 27001 Standard. no or mild symptoms.
- Determine the percentage of working from
Guideline 6 Implementation of appropriate risk home according to the COVID-19 situation.
management system and internal control system - Campaign for and seek cooperation from all
Guideline 6.1 Risk management and internal employees in receiving the COVID-19 vaccinations.
control 1. Devise measures for BAM Universal
The Company recognizes the importance of Prevention and BAM COVID-Free
efficient and effective risk management that will enable Setting.
it to manage risks in a timely manner. As such, the
Company continuously develops and reviews the policy,