A)

Company management system

We will develop an integral ISMS for each level of hierarchy in the company's structure. We will confirm the information security policy, security objectives and control strategy. We will clarify management responsibility for security of the information.

B)

Satisfy legal, statutory and client requirements.

We will identify and satisfy the requirements of relevant laws and statutes as well as requirements from clients and other related parties concerning information security.

C)

Continuous improvement:

We will periodically implement information security risk evaluations, and ISMS audits. We will take corrective and preventative measures to ensure the continuing effectiveness of the system.

D)

Information protection:

We will utilize advanced and effective facilities and technologies to deal with, transfer, store and protect various information.

E)

Education and training:

We will continuously educate and train our employees concerning information security, to strengthen employees' awareness and ability with regard to this issue.

F)

Continuous service management:

We will prepare and maintain a complete plan for continuous service provision, and realize sustainable development.

G)

Policy audits:

We will periodically audit the appropriateness and sufficiency of the basic policies in relation to the actual circumstances, and make revisions as necessary.