Page 88 - BAM ONE REPORT 2565 (ENGLISH VERSION)

82

Corporate Risk Management Division

Quarter 1 Quarter 2 Quarter 3 Quarter 4

• CSA summary report • Development of RMS • Review of ROC Charter • Enterpr r management
- Corporate KRI report - Study of THIS - BCP exercise analysis for 2023
Bangkok Commercial Asset Management Public Co., Ltd.
- TDR quality report assessment criteria - Review of risk manual - Review of risk policy
- Recovery rate report - Review of GRC policy - Review of loss data - Conduct of CSA
- Conduct of BIA manual - ESG risk summary
- Training to build risk
culture
- Call tree test

IT Risk Management and Compliance Division
IT Risk Management and Compliance Division has the duties to formulate IT risk management framework and
process, provide support to ensure that risk assessment aligns with the risk management framework in place, and give
advice, monitor and review risk management, review and report compliance with the IT-related laws and regulations
in order to prevent violation of or non-compliance with the laws and regulations of the regulatory agencies concerned.

IT Risk Management and Compliance Division

Announcement:
• IT Project Management Guidelines
Announcement of IT Risk Announcement of
Management Guidelines IT Outsourcing Guidelines • IT Change Management Guidelines
September 10, 2021 December 23, 2021 • IT System Development Life Cycle (SDLC)
August 22, 2022

Sep. 2021 Dec. 2021 Aug. 2022
Aug. 2021 Nov. 2021 Jan. 2022

Announcement of IT and Announcement of
Announcement of
IT System Access
IT Risk Management Policy Cyber Security Measures Control Guidelines
and Guidelines
August 31, 2021
November 8, 2021 January 20, 2022