Page 218 - BAM ONE REPORT 2565 (ENGLISH VERSION)

212
1.3 Determination of the scope of authority, duties
and responsibilities of the Board of Directors,
the Audit Committee, and Chief Executive
Officer, and determination of the approval
Bangkok Commercial Asset Management Public Co., Ltd.
authority for the Company’s operations and
transactions.
1.4 Giving importance to the integration of governance,
risk management a compliance (GRC)
operation of wor un by formulatin the GRC
p mov th organization towards
sustainable growth.
1.5 Preparation of handbooks for good corporate
governance and corporate social responsibility,
business ethics, and corporate governance
practices, such as provision of complaint
channels, reporting of conflict of interest, and
the Company being approved to participate
in Thailand’s Private Sector Collective Action
Coalition Against Corruption (“CAC”), which
enables the Company to attain the corporate
governance standards and achieve efficient
management and also helps to boost employees’
morale and good spirit in performing the
assigned duties to their full capacity.
1.6 Formulation of outsourcing guidelines and IT
outsourcing guidelines for all departments to
follow.
1.7 Formulation of the IT r managemen policy
a the risk management guideline in
order raise the Company’ IT r management
standards and formulation of the measures
and guidelines on information and cyber
security and of the guidelines on determination
of IT system access control to be in accordance
with the Cyber Security Act B.E. 2562.
1.8 Formulation of IT project management
guidelines and IT change management
guidelines including system development life
cycl (SDLC), which is in lin with such guidelines,
in order to comply with the standards and
criteria under the Notification of the Bank of
Thailand No. SorNorSor. 21/2562 Re: Regulations
for Supervising Information Technology Risk
and for relevant departments to perform in
the standardized manner.
1.9 Giving importance to data governance by
appointing the Data Governance Working
Committee to supervise and oversee the
Company’s data management to be carried
on appropriately and efficiently and formulation
of data governance policy and data governance
guidelines.
1.10 Work operati i compli wit the
Personal Data Protection Act B.E. 2562 as well
a relevan notification an regulation by
appointing dat protecti offi (D and
rationalizi the structure a scope o duties
and responsibilities of divisions in the
departments under Corporate Governance
and Risk Management Group with addition of
Data Protection Support Division to be directly
in charge of personal data protection, as well
as appointment of executives at vice president
and manager level to be representatives for
respective work units in coordinating personal
data protection function as data protection
champion (DPC) to perform on behalf of the
Company as personal data controller.
1.11 Giving importance to business operation
which takes into account environmental,
social and governance (ESG) principles by
integrating sustainability risk management
according to the sustainability assessment
guidelines of the Stock Exchange of Thailand
as well as conduct of risk assessment based
on the ESG reporting standards or guidelines.