HKMA Recommendations on Distribution of Structured Products Connected to Lehman Group Companies

12 13 14 Annex 1 Registered Institutions (“RIs”) are required to implement the following recommendations in accordance with the timetable specified Recommendations’ “Health-warnings™ should be attached to retail structured products with embedded derivatives or to retail derivative products generally. To provide further protection for investors, the assessment of a customer’s risk profile be separated from the sales process and be carried out by non-sales staff and that the customer be provided with a copy of the risk profile and asked to confirm his agreement that the risk profile is accurate. . Mandatory requirements to audio record the assessment process should be introduced. The regulatory requirements at point of sale should be reviewed with a view to introducing mandatory requirements for the audio-recording of the sales process and ancillary arrangements. Where the continuous review by a registered institution of the risk ratings of the investment products it sells results in a higher risk rating being attributed to a product, the institution should disclose this to customers to whom it recommended and sold the product. Requirement and Implementation Timetable RIs should include a “health warning” statement, printed in reasonable font size, to all existing derivative products and structured products with embedded derivatives that are being sold to investors. Rls should draw investors’ attention to the “health warning” statement when selling such products to them. Immediately Rls should put in place appropriate structure and procedures for the separation of risk assessment and sales process. Also adequate records (including audio records) must be maintained as evidence of the risk assessment process and confirmation of agreement to the risk assessment by the investor. As soon as possible but no later than end of March 2009. Rls should ensure adequate records and audit trail (including audio records) are in place to show that due selling process is being followed for all investors. As soon as possible but no later than end March 2009. This is a requirement in the HKMA circular of 28 October. ! The recommendation numbers are those referred to in paragraphs 8.1 to 8.50 of the HKMA’s Report. 1

15 17 18 Annex 1 Registered Institutions (“Rls”) are required to implement the following recommendations in accordance with the timetable specified In cases of sales of investment products where there is a risk mismatch between the risk rating applied to the product and the customer’s risk profile, full and complete documentation should be retained of the reasons why the customers made the investment decision, the sales process should be audio-recorded, and endorsement should be sought from supervisory staff within the institution. A mystery shopper programme be instituted periodically by the HKMA (as well as by registered institutions themselves) to test sales processes, and a pilot programme of customer surveys be commissioned by the HKMA to gauge whether such surveys can provide information useful for the examination of specific issues in the context of the longer-term customer relationship. Remuneration structures for staff engaged in Als’ securities business be subject to greater focus in the HKMA’s on-site examinations and off-site surveillance of Als’ securities business. Adequate documentation of the investor’s reasons, understanding and agreement to the risk mismatch, and seeking of supervisor’s endorsement, are existing requirements. To enhance audit trail, RIs should take steps to have relevant discussions with the investors audio- recorded. Adequate Documentation and supervisor’s endorsement to be implemented immediately Audio recording — as soon as possible but no later than end March 2009. RIs should put in place appropriate “mystery shopper” programme to test sales procedures. As soon as possible but no later than end March 2009. RIs should have adequate procedures and controls to ensure that frontline sales staff are not remunerated with bonuses calculated solely on the basis of financial performance but that other factors (including adherence to best practices guidelines and code of conduct) are in fact taken into account. Immediate