Our company underwent an impartial third-party certification audit for the ISO/IEC 27001:2022 Information Security Management System (ISMS), conducted by ARES International Certification Co., Ltd. on December 22, 2023.

Information Security Policy Statement:

1. Purpose of the Policy: Cheng Mao Enterprise Co., Ltd. (hereinafter referred to as “the Company”), in order to promote the Information Security Management System, establish a secure and trusted information operating environment, and ensure the security of data, systems, equipment, and networks, has established the “Information Security Policy” (hereinafter referred to as “this Policy”) to ensure information security, enhance service quality, and achieve the goal of sustainable business operations.

2. Scope of Application: All employees, partners, and relevant units of the Company are responsible for complying with this Policy.

3. Information Security Slogan: “Information Security is Everyone’s Responsibility.”

4. Information Security Policy:

   1. All employees of the Company are required to sign the Company’s “Confidentiality Agreement.” All personnel from external parties participating in the Company’s projects are also required to sign an “External Party Undertaking” and comply with the requirements of relevant national laws and regulations, including the National Secrets Protection Act, Trade Secrets Act, Personal Data Protection Act, Copyright Act, Criminal Code, Cyber Security Management Act, Enforcement Rules of the Cyber Security Management Act, and other subsidiary regulations under the Cyber Security Management Act. No information leakage or violation of laws or regulations shall occur.
   2. For the access to or modification of data related to commissioned work, joint cooperation, or projects, access permissions shall be established for all project files. Sensitive (confidential) information must be encrypted prior to transmission.

Information Security Policy