Page 67 - BAM ONE REPORT 2564 (ENGLISH VERSION)

Form 56-1 One Report 2021
Bangkok Commercial Asset Management Public Co., Ltd. 65

Roles, duties and responsibilities of related persons in risk management of the Company
(A) Board of Directors
1. Overseeing and ensuring that there is an efficient internal control system and appropriate risk management
by promoting the integration of business processes for governance, risk management, and compliance.
2. Encouraging the top management to participate in expressing opinions under change factors that affect the
corporate goals.

(B) The Risk Oversight Committee
1. Determining the operational risk management guideline for the organization-, department-, unit-, and office-
level; and providing recommendation and consultation on the subjects of risk management.
2. Reviewing and approving the risk management criteria and methods.
3. Monitoring the development of risk management guideline and supervising the creation of a risk management
system that corresponds with the Company’s strategies.
4. Monitoring the risk identification process and evaluating the important corporate risk appropriately,
in accordance to the situation.
5. Considering and approving the annual risk analysis and the risk management plan.
6. Reporting to the Company’s Board of Directors, regarding the progress of the risk Oversight and the corporate
risk status.
7. Communicating and coordinating with the Audit Committee, on the subject regarding important risks.
8. Monitoring and promoting further development of employees’ ability, the change of the organizational
culture, and the continuous improvement of the risk management; in order to make every employee
recognize the risks and the risk management of every department.
9. Appointing responsible employees or working groups, in order to ensure the appropriateness and the
efficiency of the risk management.
10. Giving importance to the integration of business processes for governance, risk management, and compliance
(GRC) and the coordination and sharing of information among the relevant subcommittees to ensure working
integration and promote the GRC atmosphere and culture across the organization.

(C) The Corporate Governance and Social Responsibility Committee
1. Overseeing and ensuring that the Company complies with all regulations prescribed in its compliance policy.
2. Giving importance to the integration of business processes for governance, risk management, and compliance
(GRC) and the coordination and sharing of information among the relevant subcommittees to ensure working
integration and promote the GRC atmosphere and culture across the organization.

(D) The Audit Committee
1. Reviewing to ensure that the Company puts in place the internal control system, good corporate governance
process, risk management process, and internal audit system that are appropriate and efficient.
2. Giving importance to the integration of business processes for governance, risk management, and compliance
(GRC) and the coordination and sharing of information among the relevant subcommittees to ensure working
integration and promote the GRC atmosphere and culture across the organization.