(6)According to the second condition laid down in Article 5(6) of Regulation (EC) No 1060/2009, CRAs in a third country must be subject to legally binding rules which are equivalent to those set out set out in Articles 6 to 12 of Regulation (EC) No 1060/2009 and Annex I to that Regulation. The Hong Kong legal and supervisory framework lays down detailed corporate governance requirements. The board of directors and responsible officers for the regulated activities bear primary responsibility for ensuring the maintenance of appropriate standards of conduct and adherence to proper procedures by the CRA. CRAs must have two responsible officers, both of whom have to be approved by the SFC, and at least one of them has to be an executive director under the SFO. Extensive provisions are in place regarding conflicts of interest, requiring CRAs to identify and eliminate or manage conflicts of interest and to be organised in a manner that ensures its business interest does not impair the independence and accuracy of its credit ratings as well as organisational requirements, including outsourcing, record keeping and confidentiality. In terms of organisational requirements, CRAs must fulfil such as those regarding policies and procedures for ensuring compliance with legal obligations and a permanent and effective compliance function. CRAs are also required to establish a review function responsible for periodically reviewing rating methodologies and models and significant changes thereto. The Hong Kong legal and supervisory framework contains a broad range of disclosure requirements, such as public disclosure of the ratings and annual public disclosures on the rating and ancillary activities. Therefore, the Hong Kong legal and supervisory framework is considered as equivalent to the CRA Regulation in respect of the management of conflicts of interest, the organisational requirements, the quality of ratings and of rating methodologies, the disclosure of credit ratings and the general and periodic disclosure of credit rating activities. It thus should provide for equivalent protection in terms of integrity, transparency, good governance of CRAs and reliability of the credit rating activities.