Stakeholders

Information Security Policy Goals and Advocacy

Information Security Policy

To ensure the continuity and effective operation of our business and protect our information and communications systems against unauthorized access, use, control, disclosure, disruption, modification, destruction, or other forms of cyber intrusion, Dazzle-Tek has established this Information Security Policy.

This policy is intended to safeguard the Confidentiality, Integrity, and Availability of our information assets and serves as a guiding principle for all employees and relevant external parties.

Scope of Application

This policy applies to all employees, outsourced service providers, data users and custodians, visitors, and other relevant parties.
Our information security management covers four major control domains: Organizational, Personnel, Physical, and Technological. Appropriate controls are implemented to prevent unauthorized use, disclosure, alteration, damage, or destruction of information resulting from human error, malicious acts, natural disasters, or other threats, thereby reducing potential information security risks to the Company.

Information Security Objectives

Our core information security principle is:

“To effectively allocate resources and safeguard the confidentiality, integrity, and availability of our information assets.”

Through the implementation of this policy, we aim to achieve the following objectives:

Establish a secure and reliable information-processing environment to protect the Company’s data, systems, equipment, and networks and support business continuity.
Ensure that information is accessible only to authorized personnel, thereby maintaining its confidentiality.
Prevent unauthorized modification of information and systems, thereby preserving their accuracy, completeness, and integrity.
Establish and maintain Business Continuity Plans (BCPs) to ensure the continued availability and operation of critical information and business services.
Ensure that business operations comply with Taiwan’s Cyber Security Management Act and its related regulations, where applicable, as well as other applicable legal, regulatory, contractual, and supervisory requirements.
Protect business- and service-related information against external threats and improper internal management or use, including theft, alteration, damage, loss, destruction, or unauthorized disclosure.
Strengthen personal data protection and management, reduce operational risks, and maintain a trustworthy environment for personal data and privacy protection.

Roles and Responsibilities

The Company shall establish an Information Security Management Committee responsible for overseeing, coordinating, and promoting information security activities.
Management shall support the Information Security Management System and provide the resources necessary to ensure the effective implementation of this policy.
All employees, outsourced service providers, data users and custodians, visitors, and other relevant parties shall comply with this policy.
All employees, outsourced service providers, and data users and custodians are responsible for reporting information security incidents, suspected incidents, vulnerabilities, or security weaknesses through the designated reporting channels.
Any activity that compromises or threatens information security may result in disciplinary action and, depending on the severity of the violation, civil or criminal liability in accordance with applicable laws and the Company’s internal regulations.

Information Security Management Indicators

To evaluate the achievement of its information security objectives, the Company shall establish appropriate management indicators and regularly monitor, evaluate, review, and improve its information security performance.

The Company shall:

Regularly review its information security organization, roles, and responsibilities to ensure the effective implementation of information security activities.
Provide appropriate information security awareness education and training based on employees’ roles and responsibilities and in accordance with applicable regulatory or supervisory requirements.
Strengthen the physical and environmental security of information assets by implementing appropriate protection measures and access controls.
Protect confidential information against unauthorized disclosure to third parties.
Strengthen access controls to prevent unauthorized or improper access and ensure that information assets are adequately protected.
Incorporate security requirements into the development, acquisition, maintenance, and operation of information systems and regularly conduct technical assessments, vulnerability assessments, security updates, and remediation.
Ensure that all information security incidents, suspected incidents, identified vulnerabilities, and security weaknesses are reported through the appropriate channels and are promptly investigated, handled, documented, and followed up.

Management Review

This policy shall be reviewed by management at least once a year to reflect changes in government regulations, information security standards, technologies, competent authority requirements, and the Company’s operational and management needs.

Information security feedback or requirements received from competent authorities, customers, business partners, experts, or other interested parties shall also be included as discussion items in management review meetings, where appropriate.

The management review shall ensure the continuing suitability, adequacy, and effectiveness of the Company’s information security management practices and support the continuity of its business operations.

Implementation

This policy shall take effect upon review and approval by the Company’s Information Security Management Committee. The same procedure shall apply to any subsequent amendments.

Contact Information

General Inquiries and Interested Parties : +886-2-2223-0575
Government Agencies : sales@dazzle-tek.com
Business Partners and Suppliers : sales@dazzle-tek.com
Customers : sales@dazzle-tek.com

Report abuse