November 2006 RRRRuuuulllleeee oooonnnn CCCCoooouuuunnnnttttrrrryyyy aaaannnndddd TTTTrrrraaaannnnssssffffeeeerrrr RRRRiiiisssskkkk MMMMaaaannnnaaaaggggeeeemmmmeeeennnntttt

November 2006 RRRRuuuulllleeee oooonnnn CCCCoooouuuunnnnttttrrrryyyy aaaannnndddd TTTTrrrraaaannnnssssffffeeeerrrr RRRRiiiisssskkkk MMMMaaaannnnaaaaggggeeeemmmmeeeennnntttt ffffoooorrrr BBBBaaaannnnkkkkssss 1111.... SSSSTTTTAAAATTTTEEEEMMMMEEEENNNNTTTT OOOOFFFF OOOOBBBBJJJJEEEECCCCTTTTIIIIVVVVEEEESSSS To set out the Cayman Islands Monetary Authority’s (“the Authority”) rule on Country and Transfer Risk Management for banks, (each of the sub- paragraphs of section 4 below referred to as a “Rule,” and collectively, the “Rules”), pursuant to the Monetary Authority Law (2004 Revision) (“MAL”). 2222.... IIIINNNNTTTTRRRROOOODDDDUUUUCCCCTTTTIIIIOOOONNNN 2.1. Section 34 of the MAL provides that the Authority may issue rules: 33334444.... ((((1111)))) After private sector consultation and with the approval of the Governor, the Authority may – (a) issue or amend rules or statements of principle or guidance concerning the conduct of licensees and their officers and employees; … 2.2. This document establishes the Rule on Country Risk Management and must be read in conjunction with the Statement of Guidance on Country and Transfer Risk Management for Banks. 3333.... SSSSCCCCOOOOPPPPEEEE OOOOFFFF AAAAPPPPPPPPLLLLIIIICCCCAAAATTTTIIIIOOOONNNN This rule applies to all banks regulated by the Authority under the Banks and Trust Companies Law (2003 Revision). Page 1 of 2 November 2006 4444.... RRRRUUUULLLLEEEESSSS 4.1. A bank must establish, implement, and maintain strategies, policies, and procedures for country and transfer risk management appropriate for the size, complexity, and nature of its activities that set operating limits or other practices for country and transfer risk exposures. 4.2. Such strategies, policies, and procedures must be approved by the bank’s board of directors. 4.3. A bank must take the necessary steps to measure, monitor, and control country and transfer risk. 5555.... EEEENNNNFFFFOOOORRRRCCCCEEEEMMMMEEEENNNNTTTT Whenever there has been a breach of the Rules, the Authority’s policies and procedures as contained in its Enforcement Manual will apply, in addition to any other powers provided in the Banks and Trust Companies Law (2003 Revision) and the Monetary Authority Law (2004 Revision). Page 2 of 2