Information Security Management Policy

• Security Management Policy
  To ensure the effective implementation, operation, supervision, and continuous improvement of the Company’s ISMS, and to maintain the confidentiality, integrity, and availability of the Company’s critical information systems, the Information Security Management Policy is hereby established. This policy aims to provide clear guidance for employees in their daily work. All employees have the obligation to actively participate in promoting the Information Security Management Policy to ensure the secure operation and maintenance of the Company’s data, information systems, equipment, and networks. The Company expects all employees to understand, implement, and maintain this policy to achieve the goal of continuous information operations.

• Implementing Information Security, Enhancing Service Quality
  By implementing ISMS across all employees, all measures related to information operations shall ensure the confidentiality, integrity, and availability of business data. They must be safeguarded against risks such as disclosure, destruction, or loss caused by external threats or improper internal management. Appropriate protective measures should be selected to reduce risks to an acceptable level, while continuously monitoring, reviewing, and auditing the information security system. This strengthens service quality and elevates service standards.

• Information Security Training to Ensure Continuous Operations
  The Company supervises all employees to thoroughly implement information security management practices and continuously conducts appropriate information security education and training annually. This builds the concept of “Information Security Is Everyone’s Responsibility,” enabling employees to understand its importance and comply with information security regulations. Through this, employees improve their information security awareness and emergency response capabilities, thereby reducing risks and achieving the goal of continuous operations.

• Effective Emergency Response and Rapid Disaster Recovery
  Emergency response plans and disaster recovery plans are established for critical information assets and key business operations. Regular drills are conducted to verify the effectiveness of these procedures, ensuring rapid recovery in the event of system failures or major incidents, maintaining business continuity, and minimizing potential losses.
  
  

Keewing-ID Industrial Technology Co., Ltd.