Thanachart One Report 2021 - EN

1.2 Risk Management Risk Management Policy and Plan The Company aims to strengthen risk management as part of the corporate culture through the formulation of the risk management policy and risk appetite statement as well as the implementation of the risk management guidelines as a tool for formulating the Company’s strategies and conducting business affairs. The purposes were to achieve business growth and generate a sustainable return to stakeholders in the long term. The Company believes that efficient risk management is an extremely important factor for achieving sustainable growth and maintaining the Company’s profitability. The Company’s Board of Directors and senior executives attach great importance to risk management practices which respond to changes in a timely manner. In this connection, they continuously oversee, monitor, and develop risk management systems, ensuring that the various measures remain appropriate and keep pace with changing risk factors, both internal and external. The Company puts in place the organizational structure to support risk management, ensuring that it is in line with the established framework, through the various committees’ supervision. The related details are as follows: The Company’s Risk Management Structure The Company’s Board of Directors has a role in policy determination and establishes guidelines for an efficient enterprise-wide risk management including risk management and business continuity management of Thanachart Group, ensuring that it is efficient and in line with the Company’s operations by taking into consideration the impact of risks on the Company’s operational goal and financial position. Executive Committee has a role in considering and approving all activities to be in line with the Company’s Risk Management Policies, as well as, assessing the business continuity management of Thanachart Group to present to the Company’s Board of Directors for approval. Risk Oversight Committee has a role in proposing the Company’s Risk Management Policy and the Group’s Risk Management Policy to the Company’s Board of Directors for approval. The Committee also establishes risk management strategic plans to be in line with the Risk Management Policy and revises the sufficiency of the Company’s Risk Management Policy including the efficiency of the system and practice of the specified policy. Furthermore, it has a role to control, monitor, and supervise the Company and the companies under the Group to comply with the Risk Management Policy as well as regularly report the result of the compliance to the Board of Directors including the adjustments to conform to specified policies and strategies. Audit Committee has a role in determining the supervisory guidelines for the operation, ensuring that the Company and the Group are operating in compliance with measures of related authorities. The Committee also has a role in assessing the effectiveness and competency of the overall Group’s risk management process and sufficiency of overall internal control system. 65 56-1 One Report / Annual Report 2021 Thanachart Capital Publ ic Company Limited

RkJQdWJsaXNoZXIy ODEyMzQ3