Information Security Policy

Basic Policy

Computec Engineering Co., Ltd. (hereinafter referred to as “the Company”) recognizes information security activities as one of its important responsibilities. In addition to strengthening physical and technical security measures, the Company believes that the most important factor is for employees to maintain a high level of information security awareness and to act in compliance with information security rules and regulations.

Based on these ideas, the Company hereby establishes this Information Security Policy and strives to ensure information security through the establishment and implementation of an Information Security Management System (ISMS).

Scope of Application

This Policy applies to all personnel of the Company, including officers and employees.

Establishment and Maintenance of Information Security

The Company establishes an ISMS that complies with ISO/IEC 27001, maintains it through the implementation of the PDCA (Plan-Do-Check-Act) cycle, and promotes continual improvement.

Commitment to Information Security Objectives

Each department establishes information security objectives, works toward achieving them, and continuously improves their effectiveness.

Management of Information Assets

The Company conducts risk assessments of its information assets from the perspectives of confidentiality, integrity, and availability, identifies security risks, and implements appropriate measures to address them.

Information Security Training

The Company establishes the organizational framework necessary to develop and maintain the ISMS. In addition, to ensure the effective operation of the ISMS and enhance information security awareness, the Company provides appropriate information security education and training to its employees.

Ensuring Business Continuity

The Company implements business continuity management to address interruptions to business operations caused by major information system failures, disasters, or other incidents and to ensure the prompt resumption of operations.

Compliance with Laws, Regulations, and Contractual Requirements

The Company identifies and complies with all applicable laws, regulations, and contractual requirements relevant to its business activities.

Date of enactment: October 15, 2018
Date of revision: April 24, 2019
Computec Engineering Ltd.
John Lemkuil, Chief Executive Officer