*At least one manager responsible for risk control and person in charge of risk control should be appointed in each dept. / branch respectively
*Compliance risk control should be carried out adequately in each organization as part of their regular activities.