Concrete management plan

A. System and data management
(A) The Information Center and users jointly evaluate system development, modification, conversion, and on-line validation. Subsequent parameter adjustments cannot be modified until they are reviewed and approved.
(B) The user department prepares and keeps the relevant operating documents of the system. When the program is modified, the documents are updated simultaneously to ensure the correctness and completeness of the operating data input by the personnel.
(C) Establish account privilege control, and request authorization to access data. Prevent unauthorized personnel from accessing information.

B. Computer equipment security management
(A) The authorization of each system must be issued upon application, and the password must be changed periodically.
(B) Install anti-virus software on information equipment, update virus patterns, and scan for viruses to ensure the detection of the latest virus attacks and strengthen endpoint protection.
(C) In addition to patching the security loopholes of information equipment, the relevant software/firmware versions are updated as necessary.
(D) The Administrative Department regularly inventories the cybersecurity systems, establishes a list of core system information assets, and identifies their value.

C. Network security management:
(A) Employees logging in to the Company’s intranet from a remote location must apply for VPN activation before accessing related services from the Company’s computer.
(B) Email security control: Enhance cybersecurity protection by filtering unsafe attachments and spam through firewalls, antivirus software, and client software.