1. Ensure System and Network Security: To guarantee the security of the company's hosts, network equipment, and network communications; to effectively reduce the risks of information assets being stolen, improperly used, leaked, altered, or destroyed due to human error, deliberate acts, or natural disasters; and to establish information and communication security management specifications.

2. Ensure Information Security Core Attributes: To ensure the Confidentiality, Integrity, and Availability of the company's business information.

3. Confidentiality: To ensure that information is accessible only to authorized personnel.

4. Integrity: To ensure that the information used is accurate, complete, and unaltered.

5. Availability: To ensure that authorized personnel have access to information and associated assets when required.

Information Security Policy Content

1. Legal Compliance: All information security management regulations of the company must comply with relevant government laws and regulations (e.g., Cyber Security Management Act, Criminal Code, Classified National Security Information Protection Act, Patent Act, Trademark Act, Copyright Act, Personal Data Protection Act, etc.).

2. Dedicated Organization: Establish a dedicated information security management unit responsible for the establishment, implementation, and promotion of the information security system.

3. Education and Training: Conduct regular information security education and training to promote information security policies and relevant implementation regulations.

4. Resource Management: Establish management mechanisms for host and network usage to centrally allocate and utilize resources.

5. Pre-Implementation Risk Assessment: Prior to the deployment and launch of new systems and equipment, risks and security factors must be taken into consideration to prevent situations that jeopardize information security.

6. Physical and Environmental Security: Establish physical and environmental security protection measures for the server room, and perform regular maintenance and servicing.

7. Access Control: Clearly define the usage permissions of the network system to prevent unauthorized access.

8. Internal Audit Mechanism: Formulate an internal audit plan for the information security management system; regularly review the usage of all personnel and equipment within the scope of the system; and formulate and execute corrective and preventive actions based on the audit reports.

9. Business Continuity: Formulate drills for business continuity management, backup, and restore/recovery to ensure the continuous operation of company business.

10. Shared Responsibility: All personnel of the company bear the responsibility to maintain information security and must comply with the company's relevant information security management specifications.