Thanachart One Report 2021 - EN

2.9 Internal Control and Related Party Transactions Internal Control The Company places strong emphasis on the establishment of effective and consistent internal control system. Strong internal control would help the Company to enhance effective business operation, steer the Company toward its goals, and protect the Company from operational error and from illicit exploitation from executives and staff. Furthermore, the Company takes into consideration the use of suggestions given by the auditors in streamlining the internal control system. Internal control system can be summarized as follows: 1. Organization and Environment The Company sets the structure in supporting the achievement of the organization’s objective. The Company properly specifies in writing the limitation of authorities and roles and responsibilities. It also puts in place the effective internal control system. The scopes of responsibility of the operational staff, approval authority, control and supervision function, and evaluation function are separate in order to avoid conflicts of interest, create check and balance, and conduct business operation under the principle of good corporate governance. The Company has put in writing the policies, working procedures, and working manuals. The Audit Committee is assigned to assess the sufficiency of the internal control system with various sub-committees being appointed to consider and make a decision on various matters efficiently. The Company’s Board of Directors sets clear business targets which can be measured and monitored the operating results ensuring that they are in line with the set targets. Good Corporate Governance, Handbook of the Code of Ethics, Anti-corruption policies and measures, and related announcements are set for the Directors, executives, and staff to adhere to in practice. Self-evaluations in good corporate governance and anti-corruption are conducted for staff every year to create awareness and conciousness. Systems or channels are provided for customers and employees to state their opinions or complaints and to whistle-blow regarding frauds and corruptions through the provided channels. A security and protection measures are provided for the whistleblower and the accused with justice and fairness. 2. Risk Management The Company appoints the Risk Oversight Committee to effectively consider, monitor, and supervise various risks in line with business objectives. Policies and risk management guidelines are clearly set in writings and are disclosed in the Intranet of the Company for the Directors, executives, and staff to cohere to as a practice guideline. In addition, the various changes and factors that may affect business operations are evaluated. In this connection, the Company has established adequate responsive measures. Reports on key risk issues are also presented to the Board of Directors on a regular basis. 3. Supervision of Operational Management The Company has put in place appropriate internal control measures for all levels. Apart from covering various processes, the measures clearly define power and authority as well as the related limits in relation to approval of transactions. As regards the execution of related party transactions, the Company has established guidelines in the Corporate Governance Policy and the Risk Management, which are aimed at preventing conflicts of interest. In particular, approval will not be given by related parties. In relation to loan extension or investment, the Company has established a specific policy on loan extension to major shareholders and related lending as well as investment in related businesses. In case the Company invests in its subsidiaries, the Company appoints its representatives to sit on the boards of directors of the subsidiaries to set the policies and also to give directions for them. As well, arrangements have been made that the representatives give a monthly report of the subsidiaries to the Company. 196

RkJQdWJsaXNoZXIy ODEyMzQ3