Organizational Resilience

Maintain financial stability and guard against various environmental risks to ensure sustainable business operation.

• Finance Department
• Executive Secretary of BCMS
• IT Department

Finance Department
Focuses on the quarterly changes in the ratio of equity to total assets. If there is an unreasonable decrease, identify the causes and provide management recommendations for governance units to make improvements.

Executive Secretary of BCMS
Establishes a Business Continuity Management System (BCMS) in accordance with ISO 22301, conducts operational impact analysis and risk assessment, and implements risk prevention measures for medium to high risks. Develops operational continuity plans and conducts drills.

IT Department
Establishes an Information Security Management System (ISMS) in accordance with ISO 27001. The goal is to prevent corporate operations or information services from being leaked, altered, or interrupted during operation. Identifies potential threats, vulnerabilities and their impact on business operations, manages risks effectively, and establishes information security controls to ensure the confidentiality, integrity and availability of information.

Finance Department

• Personnel and senior management decision-making.

Executive Secretary of BCMS

• Involves supervisors at the manager level (inclusive) and above throughout the Company, and key personnel from each unit.
• To strengthen risk response capabilities and enhance organizational resilience, the Company annually invests tens of millions in risk prevention and management measures (including improvements/additions of equipment and facilities, establishment of backup plans, etc.).

IT Department

• Personnel from IT Department, and members of the Information Security and Personal Information Management Review Committee.
• Regular risk assessments, vulnerability scanning, social attack drills and disaster drills.
• Strengthening information security equipment and backup measures and enhancing staff awareness of information security.

Indicators

• Ratio of Own Capital to Total Assets
• Monthly availability rate (%) of key information systems and network services
• Number of improvements for BCM med/high- risk events

2024 Targets

• Ratio of Own Capital to Total Assets >50%
• Monthly availability rate (%) of key information systems and network services ≥ 99.5%
• Number of improvements for BCM med/high- risk events: 5

Finance Department
Quarterly evaluates through financial reports reviewed or audited by accountants.

Executive Secretary of BCMS
Annually undergoes third-party audits to verify the effectiveness of Business Continuity Management System.

IT Department
Annually undergoes third-party audits to verify the effectiveness of Information Security Management System.

• The ‘Ratio of Own Capital to Total Assets’, ‘Number of improvements for BCM med/high- risk events’, and ‘Monthly Availability Rate (%) of Key Information Systems and Network Services’ are included in the key indicators for material topics. These are reported to the management team regularly each year.
• Set up relevant responsible units to manage these indicators.