Information Security

🔻 Information Security Policy

To strengthen information security governance, Arlitech is committed to creating a secure and efficient operational environment. We ensure the confidentiality, integrity, and availability of all company data, systems, and networks. Our goal is to enhance business continuity and reliability. Additionally, we provide ongoing information security training to raise awareness among all employees and promote a culture of cybersecurity. These initiatives are essential to supporting the sustainable growth of the company.

🔻 Information Security Management Organization

The Information Security Task Force is responsible for implementing and overseeing the information security management system. The task force is led by the head of the IT department, who also serves as the Chief Information Security Officer (CISO). The team works to establish a secure and reliable information environment, ensuring the safety of data, systems, equipment, and networks. They are also responsible for implementing effective information security measures and system controls. Regular updates are provided on security status and improvements.

🔻 Information Security Management & Implementation Framework

Following the PDCA (Plan-Do-Check-Action) cycle, we adopt a gradual, continuous improvement approach to ensure the effectiveness and sustainability of our company’s information operations. Our goal is to protect the confidentiality, integrity, and availability of information assets while ensuring compliance with all relevant security regulations.

🔻 Information Security Objectives

• Ensuring zero leakage of sensitive data
• Conducting at least one system restore drill per year and reviewing the results
• Performing at least one vulnerability scan per year to identify and address potential weaknesses
• Running at least one social engineering drill per year, followed by a detailed analysis and providing cybersecurity training for all employees

🔻 Information Security Items & Measures