Information security is crucial to the effective protection of the Company’s trade secrets. The Company has established an information security policy to ensure the confidentiality, integrity, and availability of its information assets. Concrete internal safeguards are also implemented to enforce information security. Oneness Biotech has listed cyber security as a material risk issue. Chairman serves as the convener of the Cyber Security Management Committee, and has authorized IT Manager to serve as the committee representative who is responsible for promoting the management and operation of cyber security, execution of the protective measures for important information, and disaster drills and the implementation plans. Any special incident occurred will be reported to the Risk Management Committee for the review of corresponding action plan.
The Cyber Security Management Committee has two subordinate execution teams: the Cyber Security Team and the Internal Audit Team. The Information Security Team, established by the IT Department, develops the information security policies and implementation plans, promotes enforcement, and reviews improvements. It reports quarterly to the Information Security Management Representative on the status of information security management. The Internal Audit Team, established by the Audit Office, is responsible for auditing and conducts at least one annual random audit of the implementation of information security policies, tracking the effectiveness of improvement plans.
In 2024, the Cyber Security Team consisted of 3 members, and the Internal Audit Team had 1 member. During the year, one information security meeting was held. Two internal audits were conducted in March and May, respectively, with no major deficiencies identified. Additionally, no significant information security violations occurred throughout the year.
Note1: All employees / high-risk employees or specific departments, calculated based on the total number of people in the course for that month
Note2: Coverage rate = Number of participants / All employees
※The above content is taken from the ESG Report