To ensure that our ISMS (Information Security Management System) is thoroughly implemented, operates effectively, is supervised and continuously maintained, and to protect the confidentiality, integrity and availability of our critical information systems, RAPIXUS hereby issues this Information Security Policy.

This policy provides employees with clear guiding principles for their daily work. All employees are obligated to actively support the information security policy to ensure the secure operation of our staff, data, information systems, equipment and networks, and are expected to understand, implement and maintain it to achieve business continuity.

Policy Objectives

  • Implement information security and enhance service quality
  • Strengthen security training and ensure business continuity
  • Prepare for emergencies and recover quickly from disasters
  • Use personal data appropriately and prevent data leakage

Implement Information Security and Enhance Service Quality

All employees shall implement the ISMS. All information-related operations shall ensure the confidentiality, integrity and availability of business data, protecting it from leakage, damage or loss caused by external threats or improper internal management. Appropriate safeguards are selected to reduce risks to an acceptable level, and the information security management system is continuously monitored, reviewed and audited to enhance service quality.

Strengthen Security Training and Ensure Business Continuity

We supervise all employees in carrying out information security management and provide appropriate security training every year, building the mindset that "information security is everyone's responsibility." This helps employees understand the importance of information security, comply with security rules, and improve their security knowledge and incident response capabilities, reducing risk and supporting business continuity.

Prepare for Emergencies and Recover Quickly from Disasters

We establish emergency response and disaster recovery plans for critical information assets and key business operations, and regularly conduct drills, so that systems can be restored quickly and key operations can continue with minimal loss when an information system fails or a major incident occurs.

Use Personal Data Appropriately and Prevent Data Leakage

Personal data is classified and assessed to ensure lawful purposes and adequate protection. We maintain access controls, use encryption and security measures when transmitting or disclosing personal data, regularly assess the compliance of our contractors and sign agreements with them to protect personal data, and strengthen employee training on data protection. We monitor and review the use, access and transmission of personal data, promptly detect and respond to anomalies or security incidents, and ensure personal data is securely and permanently deleted when no longer needed.

Security Incident Contact

Information security incidents can be reported to our contact window: Ying-Tsung Wang, Tel: +886-4-2202-5688 ext. 202.

Issued: March 5, 2024