Page 30 - SET SD 2563 - EN

About This Report & Contents
About SET and Sustainable SET Development
Information Technology Security Risks
SET develops technology and innovation to support new businesses while improving work processes and service systems in accordance with all current situations. A Working Group is responsible for dealing with threats related to information technology security, acting as an advisor and providing feedback and supporting operations to prepare for threats to SET’s IT systems. In 2020, key performances in this area were as follows:
Sustainability Performance
Sustainability Management Market Growth
collection, use or disclosure of personal information, in addition to communicating and providing training to employees and related persons to ensure proper implementation.
Anti-CorruptionRisks 205-1
Corruption is a major risk for SET due to its potential to severely affect confidence in the capital market if such incidences occurred. Therefore, every department within the organization is required to continuously assess, formulate guidelines and monitor corruption risks in their respective operations to ensure that anti-corruption measures are sufficiently effective. In 2020, no complaints or cases relating to corruption were founded in SET’s business operations.
Business Continuity Management
SET’s Business Continuity Management (BCM) includes the Crisis Management Plan, Business Continuity Plan and IT Disaster Recovery Plan. These plans are reviewed, rehearsed, and tested according to the BCM approach on an annual basis, in collaboration with relevant agencies in the capital market, to prepare for emergencies and crises such as fires, earthquakes, flooding, or incidents that prevent access to the SET office. This ensures that SET will continue to have sufficient personnel, systems, physical work locations and secondary work locations to efficiently run securities trading services – with no disruptions.
In 2020, SET launched the Business Continuity Plan in response to the COVID-19 pandemic situation. The risk management department reviewed, monitored, and continuously reported situational risk results to senior management, the Risk Management Committee, and the Board of Governors.
Messages from
the Chairman & President
ZERO
•
•
Continuously assessed risks and tested IT safety plans to ensure that IT systems are prepared and ready to operate from anywhere in the event of an emergency. Supported tools to prevent and monitor cyber threats such as Antivirus and Antimalware, Firewall, and DDoS Protection Services.
Trial computer systems for new transactions, such as the Professional Link system and New Financial ERP system, before launching operations. SET emphasizes the importance of developing well- controlled systems through rigorous testing and compliance with relevant criteria. Furthermore, systems are subject to pre-implementation review prior to utilization.
cases of trading system disruptions or cyber-attacks
In
IT systems, technical interruptions, or cyber-attacks were found.
2020, no issues relating to SET’s
Regulatory Change Risks
SET systematically assesses and analyzes risks relating to breaches of stakeholders’ personal information in line with the Personal Data Protection Act 2019 (Personal Data Protection Act, B.E. 2562 or PDPA) which came into effect in 2020. To do this, SET established personal data supervision and protection measures including careful
30
Sustainability Report 2020