To ensure the effective implementation, effective operation, oversight, and ongoing execution of our ISMS, and to safeguard the confidentiality, integrity, and availability of our critical information and communications systems, we hereby promulgate this Information and Communications Security Management Policy. This policy serves as a clear guiding principle for our employees in their daily work. All employees are obligated to actively participate in and promote this policy to ensure the secure operation of all employee data, information and communications systems, equipment, and networks. We also expect all employees to understand, implement, and maintain this policy to achieve the goal of continuous operation of our information and communications systems and business processes.

1. Leverage Information to Improve Efficiency
Company employees should properly utilize information systems to improve work efficiency and ensure the confidentiality, integrity, availability, and compliance of information. They should also minimize the likelihood of information security incidents to ensure the company's business sustainability.

2. Strict Management to Ensure Security
Supervise all employees to implement information security management. Information security is the shared responsibility of all employees. Each department manager should urge their employees to comply with the relevant provisions of the company's information security management system. Daily information security management procedures and regulations must comply with relevant national laws, administrative regulations, company regulations, and relevant contracts.