Information and Communication Security Risk Management-MIRLE GROUP

Information Security Management

Mirle Information Security Management Committee was established in 2020, making Information Security System more defensive. All information must comply with domestic and international laws and regulations and information security standards.

Information Security Management Organizational Architecture

For improved information security management, the Company called for the Information Security Management Committee meeting on November 18, 2020 and established related information security organizations and periodically reports the status of information security governance to the Board of Directors.
Implementation Status in 2020: (a). in September 2020: to take charge of information security governance, planning, supervision, and implementation of the Mirle Group, the independent unit “Information Security Protection Department” was established. (b). in November 2022: Mirle's president convened and formed the “Information Security Management Committee.” (c). in December 2022: The Information Security Policy and Information Security Organic Charter was approved.
In August 2022, CTO Mr. Charles Kao was assigned as Chief Information Security Officer (CISO).

Organizational Chart

Information Security Policy

Mirle information security policy is as follows:

Ensure information security; prevent information leakage and personal data loss.
Ensure the completeness and availability of our business information to execute corporate operations normally.

Substantial management solution

The Company’s information security policy is focused on information security governance, compliance, and technological utilization for the assessment and planning. It is described as follows.

Item	Highlight	Description
Information Security Governance	Enforce PDCA cyclic quality management Maintain information security management systems Continuously improve risk management	Establish an information security management system and build security awareness. Regularly verify and adjust the security system, to deepen information protection.
Compliance	Periodically review and adequately revise information security-related regulations Build compliance cyclic mechanism	Build corporate information security compliance cyclic mechanism and periodically review and revise internal operating procedures in order to meet international laws and regulations and the laws and regulations in respective overseas areas.
Technology utilization	Promote information security digitally Information security boundary review & countermeasure Automation threat & defense mechanism deployment	Identify and differentiate risks; adjust and reinforce existing defense framework; apply data analysis and identification technologies; improve visibility and readability of threats; and find out risks and prepare countermeasures early.

Implementation Progress

Complete the construction to enhance the physical security of the information machine room, including the interiors and exteriors of the room, the addition of surveillance systems, motion detection systems, and fire prevention systems, among others.
The Company was certified by an impartial third party in December 2021 after having passed the final review required for the international ISO 27001:2013 (ISMS) Information Security Management System certification, and issuance of the Certificate was advised.

Careers

MIRLE has a variety of positions available,both technical and non-technical for talented professionals at all experience levels.

Sustainability

Information Security Management

Information Security Management Organizational Architecture

Information Security Policy

Substantial management solution

Careers

Investors