All personnel shall thoroughly implement the Information Security Management System (ISMS). All measures related to information operations must ensure the confidentiality, integrity, and availability of business data, protecting them from risks such as leakage, destruction, or loss resulting from external threats or improper internal management. Appropriate protective measures shall be selected to reduce risks to an acceptable level. Furthermore, the monitoring, review, and auditing of the information security management system shall be continuously conducted to strengthen service quality and elevate service standards.
Strengthen information security training and ensure business continuity. Supervise all personnel in implementing information security management tasks, continuously conduct appropriate information security education and training annually, and establish the mindset that 'information security is everyone's responsibility.' This encourages personnel to understand the importance of information security and comply with security regulations, thereby enhancing information security awareness and emergency response capabilities, mitigating information security risks, and achieving the goal of continuous business operations.
Establish emergency response plans and disaster recovery plans for critical information assets and core business operations, and regularly conduct drills for various emergency response procedures. This ensures rapid recovery in the event of information system failures or major disasters, guarantees the continuous operation of critical business functions, and minimizes potential losses.
