Governance

We continuously engage with our employees, shareowners, and clients to ensure that we employ best practices at the management level. We consistently update or enact new corporate governance policies or disclosure to enhance transparency and accountability. As a technology services company, we believe we are the custodian of clients' and other stakeholders' information assets. Hence, it is our primary concern to ensure an efficient data-security program. We continue to develop comprehensive guidelines and policies to implement and promote sustainability across our value chain. Our goals

Goal 1:

Assess all suppliers based on sustainable procurement criteria by FY2030 Our framework for sustainable procurement is developed. We assess and address labor rights risks across our supply chains through our Responsible Sourcing Program to strengthen our human rights efforts. The road ahead for us involves designing a supplier Code of Conduct, a suppliers' assessment framework, a plan (including selected ESG criteria), and providing feedback to suppliers for continuous improvement.

Goal 2:

Average 95% or higher Code-of-Conduct training achievement for employees year-on-year To foster a culture of ethics and compliance, we disseminate information and best practices to our employees and promote mandatory compliance and training. All our employees and governance body members are trained on the Code of Conduct and ethics, which includes training modules that employees are required to take every year to renew their commitment. Our compliance training is continually reviewed and updated as necessary.

Goal 3:

Continue commitment toward data privacy and data security compliance

Target: Sustain BitSight rating at an advanced level (740 and above) with a continuous endeavor to reach a maximum level of 810

We live in a time of unprecedented regulatory change and growth, with stringent data privacy regulations evolving rapidly worldwide. Data privacy is of utmost importance to our operations and services. Aligning with our goal of commitment to data privacy compliance, we undertake impact assessment and ensure corrective actions before releasing new and redefined processes. Additionally, all employees must undergo annual data privacy and cybersecurity awareness training.