JET OPTO
AboutAbout JET OPTO
Company Profile Milestones Subsidiaries & Affiliates Awards
ProductsProducts
In-Vehicle Entertainment Smart Cockpit Driving Safety
TechnologyTechnology
R&D Capabilities Patent Portfolio Certifications Global Manufacturing
InvestorInvestor Relations
Financial Information Quarterly Reports Annual Reports Monthly Revenue Corporate Governance Board of Directors Audit Committee Compensation Committee Sustainable Development Committee Internal Audit Major Internal Policies Shareholder Services Stock Quotes Shareholders' Meeting Major Shareholders Dividends Material Information Contact IR
ESGESG
Sustainability Sustainable Operations Stakeholders Information Security Intellectual Property Governance Compliance Integrity Management Risk Management Friendly Workplace Compensation & Benefits Employee Highlights Talent Acquisition Environment Green Environment Sustainability Report
NewsNews
Press Release Events
CareersJob Openings ContactContact Us

HOME / ESG / Information Security

Information Security

Establishment and Implementation of the Information Security Management System

1. To effectively promote the Company’s information security management system, the “Information Security Committee” was established on December 14, 2023. The Chief Information Security Officer (CISO) serves as convener, and the Committee meets in accordance with the annual plan or as actually needed to review all matters relating to information security management, ensuring that the information security strategies formulated effectively achieve their objectives and thereby enhancing the secure operation of the Company’s business.

2. The Information Security Committee is headed by the CISO, with department heads serving as executive secretaries and information security representatives. Personnel from each department are also assigned to the Information Security Working Group and the Emergency Response Team, which are responsible for planning, implementing, supervising, and improving the information security management system, as well as handling information security incidents.

3. The Information Security Audit Team is led by the Internal Audit Office and is responsible for supervising and reviewing the effectiveness of the information security management system, ensuring that an internal information security audit is conducted at least once a year. In addition, the Information Security Committee convenes a management review meeting at least once a year, mainly to review the implementation of the information security policy and to discuss information security issues of concern to stakeholders, audit results, risk assessments, and opportunities for continual improvement. The most recent internal information security audit was completed on January 24, 2024.

Information Security Implementation

1. Strengthening information security: In 2024, measures to strengthen information security were promoted and implemented, focusing on improving and upgrading systems, networks, and the hardware environment.

2. Reducing the likelihood of information security incidents: Through various strengthening measures, the risk and likelihood of information security incidents are reduced, and the following items are carried out:

  • Email social engineering drill tests to raise employees’ awareness of phishing attacks.
  • Information security awareness campaigns and training to strengthen employees’ understanding of information security precautions and their ability to respond.
  • Threat and vulnerability assessments of information assets, comprehensively reviewing the security of the Company’s information assets to identify potential risks.
  • System penetration testing and vulnerability scanning, improving firewall UTM threat protection, strengthening Microsoft advanced attack protection features, and upgrading the asset management system to enhance security.

3. Introducing an information asset management system: An information asset management system was adopted to monitor and manage assets and to strengthen information security protection.

4. Introducing a network management system: Management and monitoring of network resources were strengthened to ensure network security.

5. Strengthening hardware and controlled-area management: Management of hardware equipment and controlled environment areas was strengthened to protect critical resources and equipment.

6. Obtaining TISAX certification: The Company successfully obtained TISAX (Trusted Information Security Assessment Exchange) certification, meeting international standards in information security.

Information Security Objectives

In 2024, no major information and communication security incidents causing business interruption, data corruption, or data leakage occurred.

Objective 2024
Major information security incidents causing business interruption, data corruption, or data leakage: fewer than 1 0 incidents
No major information security incidents involving business interruption, data corruption, or data leakage occurred.
Information Security Policy

JET Optoelectronics Co., Ltd. Information Security Policy

To enhance the effectiveness of information security management, this policy aims to protect the Company’s information assets from risks to confidentiality, integrity, and availability, and to ensure that information operations run stably and continuously. At the same time, we strive to comply with all relevant legal and regulatory requirements in order to guard against potential intentional or unintentional threats from both inside and outside the Company. An information security policy has been formulated specifically for this purpose.

JET Optoelectronics Co., Ltd. Information Security Policy (PDF)