To ensure the effective implementation, operation, oversight, and continuous improvement of our Information Security Management System (ISMS), and to safeguard the confidentiality, integrity, and availability of our critical information and communications systems, we hereby establish this Information and Communications Security Management Policy. This policy serves as a clear guiding principle for all employees in their daily operations.

All employees are obligated to actively participate in and promote this policy to ensure the security of company data, employee information, communication systems, equipment, and networks. We expect every employee to understand, implement, and uphold this policy to achieve the continuous operation of our systems and business processes.

1. Leverage Information to Improve Efficiency Employees should properly utilize information systems to enhance work efficiency while ensuring the confidentiality, integrity, availability, and compliance of all information. It is essential to minimize the risk of information security incidents to guarantee the company's business sustainability.

2. Strict Management to Ensure Security Information security is a shared responsibility across the entire organization. Management at all levels must supervise and enforce information security practices. Each department manager is responsible for ensuring their team fully complies with the company's ISMS provisions. All daily information security management procedures must strictly adhere to relevant national laws, administrative regulations, internal company policies, and contractual obligations.