Regulations Governing Internal Operating Systems and Procedures for the Outsourcing of Financial Institution Operation Article 6

The unit-in-charge specified in subparagraph 2, paragraph 2 of Article 4 herein shall carry out the following tasks:1. Managing outsourced operations in accordance with the internal outsourcing rules set forth in accordance with Article 4 herein.2. Supervising the outsourced operations in connection with the protection of customer interests, risk management and internal controls, conducting periodic evaluations, and submitting the findings to the board of directors or officer authorized by the head office in the case of a branch of a foreign financial institution in Taiwan. Where any material irregularities or deficiencies occur, a report shall be filed with the competent authority and the Central Bank as soon as possible.3. Supervising the establishment and implementation of internal control and internal audit systems by service providers.4. Drafting and executing measures for selecting service providers, and ensuring that an outsourced operation is a business item that the selected service provider is legally allowed to operate.The unit-in-charge shall regularly inquire relevant information in the outsourcing service providers and employees registration system created by the Joint Credit Information Center ("JCIC") and retain a copy of the inquiry record for future reference as a part of the financial institution's internal control activities over outsourcing and supervision of service providers' internal control systems.