company shall formulate standards and procedures for risk management (hereafter referred to as "risk management standards") in order to timely perceive, assess, monitor, and control risks incurred in the course of asset management, performance of business affairs, and other various transactions.
(2) Where a financial holding company has formulated risk management standards for its subsidiaries, etc., which are financial companies, a subsidiary, etc. of the financial holding company need not formulate risk management standards, notwithstanding paragraph (1).
(3) Detailed matters to be prescribed by risk management standards and other necessary matters shall be prescribed by Presidential Decree.
Article 28 (Appointment, Dismissal, etc. of Risk Managers)
(1) Every financial company (excluding investment advisory business entities and discretionary investment business entities specified by Presidential Decree, taking into consideration the size of assets, the business in which the financial company engages, etc.) shall have at least one risk manager who shall take charge of examining and managing risks incurred in the course of managing assets, performing business affairs, and other various transactions.
(2) Article 25 (2) through (6) shall apply mutatis mutandis to the appointment, dismissal, term of office, etc. of risk managers. In such cases, "compliance officer" shall be construed as "risk manager."