1. Management Objectives

The Company values the security and protection of its information assets. In accordance with relevant regulations, it has established a comprehensive information security management system to ensure the confidentiality, integrity, and availability of information, thereby reducing operational risks and safeguarding critical research data and materials.

2. Organization and Responsibilities

The Company has designated dedicated information security personnel responsible for planning, promoting, and implementing cybersecurity policies. Regular reviews of security strategies, risk control measures, and improvement effectiveness are conducted. In the event of major cybersecurity issues, reports are submitted to senior management and the Board of Directors to ensure accountability in cybersecurity governance.

3. Technical Protection Measures

The Company has implemented a multi-layer defense architecture, including firewalls, intrusion detection systems, antivirus protection, and vulnerability scanning mechanisms. Account and access control are enforced, and data encryption is applied when necessary to prevent unauthorized access and data leakage. In addition, data backup and off-site disaster recovery mechanisms are established to ensure business continuity.

4. Employee Management and Education

The Company continuously promotes information security education and social engineering drills to enhance employees’ awareness and responsiveness to cybersecurity risks. Through internal audits and external reviews, the effectiveness of the information security management system is regularly assessed, and continuous improvements are made.

5. Future Outlook

The Company will continue to strengthen its information security protection capabilities by following the latest regulations and technological trends, thereby advancing corporate governance and achieving sustainable operations.