Page 65 - BAM ONE REPORT 2564 (ENGLISH VERSION)

Form 56-1 One Report 2021
Bangkok Commercial Asset Management Public Co., Ltd. 63

Risk Management

Risk Management
The Company emphasizes the risk management, which is one of the main components of good corporate
governance; whereas the Company focuses on preparing and preventing any situations and uncertainties that may
occur and affect its ability to successfully achieve its goals and objectives. The risk management is implemented both
at the organization-level and at the activity-level. The Company also cultivates the concept of risk management as
part of its operation.

The Company integrates a risk management system into its business operation, whether at the organization-level,
department-level, and operative-level. The management information system allows executives to monitor the risk
status at each level; and to connect the risk management system with the Company’s database. The Company also
appoints directors and outside experts to the Risk Management committee, in accordance with the Company’s policy,
and in order to improve the overall efficiency of the Company’s risk management. The Company develops and
disseminates knowledge and understanding about the risk management to its employees of every level continuously,
in order to limit the risk to a level that is acceptable for the organization. Moreover, the Company’s risk management
aims at the business continuity management, in order to allow the Company to conduct its business operation
continuously.

The Company reviews, adjusts, and improves its risk management system continuously, in accordance with the
Company’s risk management policy/ guideline specified by the Board of Directors. Moreover, the risk management
system also plays an important role in determining and reviewing the Company’s risk management policy/ guideline,
as per the characteristics of the business operation that covers all the important risks of the Company. The risk
management system also specifies the strategies for managing, monitoring, and controlling the organization’s risks at
an acceptable level for the Company.

The Company realizes that risk management is a very important component of its business operation. Therefore,
the Company specifies the risk management guidelines that are appropriate and efficient, in accordance with
the characteristic of its business operation. And for this, the Company must study, evaluate, monitor, and manage the
risks systemically and continuously, in order to make sure that the Company’s executives will understand all the related
risks of the Company’s business operation, and will be able to manage those risks under the framework specified by
the Company.

The enterprise risk management structure
The Company continuously specifies its enterprise risk management, while considering various risks that may
prevent the Company from achieving its goals. The Board of Directors instructs all executives to manage the risks
involved with the departments that they are responsible for, under the discretion of top executives of such departments
and under the supervision of the Risk Oversight Committee. The risk management activities are reviewed by the Internal
Audit Department, who presents the auditing result to the Audit Committee regularly.