Ethical Corporate Management

本公司之資訊安全政策聲明為：『確保資訊資產之機密性、可用性與完整性，以保障客戶、公司、股東、員工及供應商之權益，並能善盡社會責任。』

成立跨部門之資訊安全委員會，由總經理擔任召集人，並由各部門一級主管主管擔任委員，成員分別為資訊安全委員會主委(資訊中心最高主管)、總經理室、財務部、行政部、品經部、研發中心、營業部、生管部、廠務部、資訊中心及各生產單位。

資訊安全委員會定期召開，主要負責資訊安全政策、目標及相關規範之規劃擬定、核准及督導，並向董事會報告資訊安全管理之成效。

設置資安長，由資訊中心最高主管擔任，資安專責人員共四名，專責推動資安營運持續計畫、資訊資產盤點及辦理資安風險評估作業，建立並執行相對應的管理制度與技術防護，以維護資訊安全為目標。

The company’s information security policy statement is as follows: “To ensure the confidentiality, availability, and integrity of information assets, thereby safeguarding the interests of customers, the company, shareholders, employees, and suppliers, while fulfilling our corporate social responsibility.”
An interdepartmental Information Security Committee has been established, chaired by the President. Committee members include 1st-level supervisors from each department. The members consist of the Chairperson of the Information Security Committee (the highest-ranking executive of MIS), the SR office, the Finance Department, the Administration Department, the Quality Management Department, the R&D Center, the Sales Department, the Production Control Department, the Facilities Department, the MIS, and all production departments.
The Information Security Committee convenes regularly and is primarily responsible for the planning, formulation, approval, and supervision of information security policies, objectives, and related regulations. It also reports the effectiveness of information security management to the Board of Directors.
A Chief Information Security Officer is appointed, held by the highest0ranking executive of the MIS. There are 4 dedicated information security personnel responsible for promoting the information security business continuity plan, conducting information asset inventory and risk assessments, and establishing and implementing corresponding management systems and technical safeguard, all aimed at maintaining information security.