Responsible Governance

Darfon established an information security committee in the fourth quarter of 2021 and established an information security director (information security chief) to hold regular information security review meetings, a total of 2 times in 2023. In addition to the Information Security Committee, there are also colleagues responsible for information security management who work with the committee to manage information security risks and promote various information security policies, formulate and introduce information security systems, and conduct information security risk audits. The relevant management structure of the committee organization is divided as follows:

Darfon attaches great importance to information security. The company has formulated relevant internal information security management operations in accordance with the provisions of Article 9 "Computerized Information System Processing" of "Publicly Offered Companies Establishing Internal Control Systems" to reduce the unknowns caused by the ever-changing information environment. Information security risk threats, basic information security policy controls are as follows:

Information Security Control Measures

①  Internal and external network access must pass firewall/virus wall/intrusion prevention system inspection.

②  All information equipment must be installed with anti-virus/anti-backdoor software.

③  Regularly change user passwords every 3 months and must comply with the complexity principle.

④  To access any system, you need to apply for an account and have permissions to restrict open access. The account will be deleted after resignation.

⑤  Confidential information access, file encryption throughout the process.

⑥  All processes must be electronically signed and approved before they can take effect.

⑦ All end-point (user terminal) information equipment reclaims Admin (administrator) permissions and installs asset management software and endpoints.