Information Security Policy

This policy is formulated to ensure the confidentiality, integrity, and availability of the information assets of Hon Young Semiconductor Co., Ltd. (hereinafter referred to as “the Company”), and to comply with international information security standards and statutory requirements, It aims to strengthen information security management, safeguard against intentional or accidental threats from internal and external sources and serve as the highest guiding principle for the Company’s information security management while balancing business needs and risk assessments.

Scope of Application

  • All personnel of the Company (including regular employees, contract employees, and interns).
  • Relevant business affiliates, vendors, clients.
  • Service providers, or any third-party personnel.

Information Security Responsibilities

  • Information security is the collective responsibility of all Company personnel, and all contribute to its maintenance.
  • Management support the Information Security Management System, actively participate in relevant activities.
  • The Company continuously monitor information assets and associated risks, and implement appropriate patching or preventive measures.
  • Any department or personnel who violates this policy or engages in conduct that compromises the Company’s information security be subject to disciplinary action or legal action according to the severity of the damage.

Information Security Objectives

  • Maintain an appropriate level of information security and implement security controls to ensure the confidentiality, integrity, and availability of information assets throughout their entire lifecycle.
  • All information security management regulations comply with applicable information security laws, regulations, and policy requirements.
  • Appropriately protect information assets from damage caused by unauthorized access or operational negligence.
  • Conduct regular information security education and training to strengthen the awareness and promotion of information security policies.