Purpose

To ensure the confidentiality, integrity, and availability of the information assets of JPC International Co., Ltd. (hereinafter referred to as “the Company”), comply with regulatory requirements, and prevent internal and external threats, the Company hereby establishes this policy.

---

Scope of Application

This policy applies to all employees, outsourced service providers, data users (including custodians), and visitors.
The scope of information security management covers four major areas: organization, personnel, physical, and technical.
It aims to prevent improper use, leakage, alteration, or destruction of data caused by human error, intentional acts, or natural disasters, which may pose potential risks to the Company’s information security.

---

Goal

• To maintain the confidentiality, integrity, and availability of the Company’s information assets, this policy is implemented with the following objectives:
• Establish a secure and reliable information environment to ensure the safety of Company data, systems, equipment, and networks, thereby safeguarding business continuity.
• Protect the security of Company services by ensuring access is restricted to authorized personnel, maintaining confidentiality.
• Prevent unauthorized modifications to ensure accuracy and integrity.
• Establish business continuity plans to ensure uninterrupted operations.
• Ensure compliance with information security guidelines for listed companies and related regulations.
• Protect personal data associated with Company services from theft, alteration, damage, loss, or leakage caused by external threats or improper internal management.
• Ensure compliance with applicable laws and regulations (e.g., Criminal Code, National Secrets Protection Act, Patent Act, Trademark Act, Copyright Act, Personal Data Protection Act, etc.).

---

Strengthening Joint Information Security Defense

---

Company Information Security Organizational Structure

---

JPC connectivity Inc. 2025 Information Security Committee Agenda Summary

---

Information Security Management System

The Company’s Information Security Management System (ISMS) follows the continuous improvement PDCA cycle model established by the International Organization for Standardization (ISO), integrating and strengthening the security framework into a systematic, documented management mechanism.
Through ongoing monitoring and performance reviews, the Company ensures effective information security management and business continuity, protecting the confidentiality, integrity, and availability of information assets, while complying with relevant laws and regulations.
This safeguards the rights of employees and customers and achieves the following goals:

1. Implement the information security policy.
2. Ensure regulatory compliance.
3. Strengthen incident response capability.
4. Cultivate information security expertise among staff.
5. Achieve measurable effectiveness in information security management.

JPC obtained ISO/IEC 27001:2022 certification for its information security management system in September 2025. This reflects JPC's continued efforts and commitment to improving information security performance in the field. To ensure the company implements the ISO 27001 management mechanism, a recertification process is conducted every three years to maintain the validity of its ISO 27001 certification.

---

Personal Data Protection Management Measures

---

2025 Cybersecurity Data Statistics