Regulations Governing the Security Maintenance and Administration of Financial Institutions Article 3

A financial institution shall draw up operating rules for its security operations and file the rules with the competent authority for reference after they have been approved by its board of directors (or by an officer authorized by the head office in the case of a branch of a foreign bank in Taiwan) and implemented. Any amendment to the operating rules for security operations shall be submitted to the board of directors and the competent authority for reference after it has been passed in the managing directors' meeting and implemented. The operating rules for security operations shall contain at least the following: 1. General security protection measures. 2. Security protection measures for business premises, vaults, safe deposit boxes (rooms), automated teller machines, and cash transport operations. 3. The setup of a security supervision taskforce. 4. Reporting of material security events.