Compliance

Basic Policy on Information Security

1. Purpose of ISMS
   1. By preventing information security accidents before they occur, to carry out its corporate social responsibility and aim to realize continuous customer service; and
   2. If an information security accident occurs, to minimize and promptly recover the damages thereof and to prevent the occurrences of similar accidents.
2. To construct an information security system and to organize the establishment and environment of the information security system, and to continuously carry out and improve the ISMS.
3. To execute security countermeasures based on risk assessments and to prevent accidents and their recurrence by executing security countermeasures based on risk assessments.
4. To carry out education and training and to educate and train officers and employees, and to make known the provisions for improving the awareness of information protection and information management.
5. To comply with the laws and regulations and strictly perform the agreements with customers, and to ensure the security of information assets based on internal rules.
6. To periodically review and improve the information security management system in order to properly respond to social changes, technological changes and legal changes.