Information Security Policy

Code of Conduct

1. To ensure the confidentiality, integrity, and availability of information assets, the Company will implement appropriate organizational and technical security controls and respond to evolving information technologies and emerging threats.

2. The Company will provide information security education to all employees and ensure thorough communication of this policy, in order to enhance and maintain security awareness.

3. The Company will establish an information security management system (ISMS) and related security objectives, conduct periodic reviews, and continuously maintain and improve the ISMS.

4. To operate, maintain, and continually improve the management system, the Company will delegate the necessary responsibility and authority to the appointed management representative.