Page 76 - BAM ONE REPORT 2565 (ENGLISH VERSION)

70

Roles, duties and responsibilities of parties concerned in risk management
(1) Board of Directors
1. Overseeing and ensuring that there is an efficient internal control system and appropriate risk management.

2. Encouraging the top management to participate in expressing opinions under changing circumstances
that affect the corporate goals.
Bangkok Commercial Asset Management Public Co., Ltd.

(2) Risk Oversight Committee
1. Determining operational risk management guidelines at organization/department/office/branch levels, and

providing recommendations regarding risk management.
2. Reviewing and approving risk management criteria and methodology.
3. Monitoring development of risk management guidelines and supervising formulation of risk management
system that corresponds with the Company’s strategies.
4. Monitoring key corporate risk identification and assessment processes to suit the situations.

5. Considering and approving the annual risk analysis plan and the risk management plan.
6. Reporting progress of risk oversight and enterprise risk status to the Board of Directors.
7. Communicating and coordinating with the Audit Committee on key risk matters.
8. Monitoring and driving development of employees’ capability, redefining organizational culture, and ongoing

improvement of risk management to ensure all employees are aware of risks and control risks of all work units.
9. Appointing employees or working committees to be in charge in order to ensure appropriate and efficient

risk governance.
10. Giving importance to the integration of business processes for governance, risk management and compliance
(GRC) and the coordination and sharing of information among relevant committees to enable work integration
and promote the GRC atmosphere and culture across the organization.

(3) Corporate Governance for Sustainability Committee

1. Overseeing and ensuring that the Company complies with all regulations prescribed in its compliance policy.
2. Giving importance to the integration of business processes for governance, risk management and compliance
(GRC) and the coordination and sharing of information among relevant committees to enable work integration
and promote the GRC atmosphere and culture across the organization.

(4) Audit Committee

1. Reviewing to ensure that the Company has in place the internal control system, corporate governance process,
risk management process, and internal audit system that are appropriate and efficient.

2. Giving importance to the integration of business processes for governance, risk management and compliance
(GRC) and the coordination and sharing of information among relevant committees to enable work integration
and promote the GRC atmosphere and culture across the organization.