Page 74 - BAM ONE REPORT 2565 (ENGLISH VERSION)

68

BAM’s Risk Management Structure

Board Of Directors
Bangkok Commercial Asset Management Public Co., Ltd.
Nomination and Technology Risk Oversight Corporate Governance for
Executive Board Audit Committee
Remuneration Committee Committee Committee Sustainability Committee

Chief Executive Officer
( CEO )
Internal Audit Department

Regional Loan Restructuring Information Technology Corporate Governance and
Business Supporting Group
and Sales Group and Digital Group Risk Management Group

Bangkok and Vicinity Financial Management Accounting Strategy and Business
Loan Restructuring and Investment Group Development Group
and Sales Group 1
Risk Management Department
• Corporate Risk Management Division
Corporate Supporting Group Human Resources Group • IT Risk Management and
Compliance Division
• Data Protection Support
Division
rd
st
nd
3 Line 2 Line 1 Line

The Company specifies the scope of risk management by classifying risks into three levels as follows:
(1) Corporate risk: Corporate risk may prevent the Company from achieving its organization-level objectives and
goals. Corporate risks are assessed by top executives of business groups and the management, and are
under the supervision of the Risk Oversight Committee.

(2) Business group risk: Business group risk may prevent the Company from achieving its business group-level
objectives and goals. Business group risks are assessed by top executives of the respective business groups
and the management, and are monitored by the respective business groups.

(3) Functional risk: Functional risk normally occurs with the day-to-day operation. Functional risks are assessed
by respective departments and branches according to the main processes in place as well as any other
processes, in which departments and branches involved might be disabled to achieve their plans and goals.

The Company has its internal control and risk management reviewed and assessed regularly on a yearly basis
through the chain of command (bottom-up approach) and reviewed by top executives (top-down approach) in order
to monitor and review key risks that may affect the Company’s business operation.