Thanachart One Report 2021 - EN

As regards the measures for overseeing the use of information systems, the Company has adopted various policies including, among others, the information security policy and the standards for overseeing the development and maintenance of technological systems. The objective is to use the standards for overseeing the Company’s operations. 4. Information Technology and Communication The Company has put in place the process of information preparation and the guideline of information disclosure. The disclosed information has to be accurate, current, and sufficient to all related parties, i.e. Directors, executives, staff, shareholders, clients, and other stakeholders in order to efficiently support their decision making. Communication channels are provided for both internal and external parties to report on frauds and corruptions through whistle-blower hotline. 5. Auditing and Monitoring The Company has put in place a system for monitoring business performance and presenting a report comparing the actual performance with the established goals of the Company and its subsidiaries to the Executive Committee and the Board of Directors on a monthly basis. In this connection, the goals will be reviewed every six months in order to achieve the business performance as planned. Internal Audit, who reports directly to the Audit Committee, is responsible for auditing and assessing work units and work procedures in order to evaluate the internal control and risk management systems. They are also responsible for reporting any significant defect and making suggestion guidelines to correct the root cause problems as well as reporting progress of correction of such defect to the Audit Committee on a monthly basis. The auditing makes use of end-to-end process as the auditing guidelines. Furthermore, the Compliance Department to monitor the adherence to the Code of Conduct and the avoidance of any conflict of interest. They report to the Audit Committee, the Executive Committee, and the Board of Directors every six months. In the Board of Directors Meeting No. 1/2022 dated 31 December 2022, the Board of Directors concluded that the internal control system of the Company was appropriate and adequate to conduct business operation. Related Party Transactions Measures or Procedures Related to Approval of Related Party Transactions The Company pays great attention to related party transactions and connected transactions. Under the good corporate governance framework, the Company has established a practice policy and approval processes which are in line with the requirements of the Public Limited Companies Act, the Securities and Exchange Act, and other related laws as well as the regulations of the regulators concerned, including the SEC and the SET. The objective is to prevent transactions that give rise to conflicts of interest. The policy and processes which cover transactions between the Company and parties who may have conflicts of interest have been announced to the staff and executives for adherence. In considering the execution of transactions between the Company and its subsidiaries with parties which may have conflicts of interest, the Company uses the same procedures as applied to customers or business counterparts in general. It also follows the properly established normal processes as it deems necessary to support the Company’s operations. In executing related party transactions, to prevent a conflict of interest, the Company not only has adopted the practice of using a fair and appropriate price but it also complies with the regulatory requirements, taking into consideration mainly the maximum benefit to be gained by the Company and its shareholders. 197 56-1 One Repor t / Annual Repor t 2021 Thanachar t Capi tal Publ ic Company Limi ted

RkJQdWJsaXNoZXIy ODEyMzQ3