1. Take organizational and technically appropriate measures to ensure the confidentiality, integrity and availability of information assets to respond to changing information technology and new threats.

2.We will provide information security education to all employees and ensure that policies are well known, and we will work to raise and maintain awareness.

3.Set a management system and information security purposes, review them regularly, and continuously implement and maintain improvements.

4.Delegate responsibility and authority to the person in charge of management in order to execute, maintain, and improve the management system.