Initial recommendations Internal Governance 1 2 Reinforce “Internal Control /Audit” Introduce “Risk management” • Minimize the amount of possible risk from “Data Errors” “Misuse” “Privacy Concerns” • Decide on which risks to take from business standpoint Regulatory/Public resopnses 3 4 Comply with “Regulation” • Not only oversee compliance but also analyze regulatory trends Introduce “correction mechanism" • Introduce correction mechanism where data owner can review and correct Insurance 5 Insurance as a “last resort” • Protect CheckPoint and data owner from uncovered potential risk SEO 110802-YNE-Cross-border PMI proposal_v2 1 This information is confidential and was prepared by Bain & Company solely for the use of our client; it is not to be relied on by any 3rd party without Bain's prior written consent