Information Security Policy has been developed by Advanced Communications Co., Ltd. with a view to realize its management idea, to appropriately deal with information assets needed for its business activities, and moreover to protect all information assets. Advanced Communications Co., Ltd. shall aim to be an organization trusted by consumers and the general public through constant improvement of the security standards by taking measures based on this policy.

1: An Object of Security Policy

The definition of information assets as an object of Information Security Policy is any information obtained and held through business activities and performances. This policy applies to all board members and employees of Advanced Communications Co., Ltd. It also applies to part-timers, temporary staffs or employees from subcontracting companies who are engaged to work with or who have access to Advanced Communications Co., Ltd.

2: Organizing Information Security Administrative System

Every effort shall be made to protect all information assets and to adhere to the legal imperatives and regulations related to the information security. A secure administrative system of information security shall be established to gain trust from the society. Also by accurately understanding the security standards of a partner under contract, the utmost fulfillment shall be ensured.

4. Establishing Information Security Committee

A chief administrator shall be assigned and an Information Security Committee shall be established.Through this implementation, circumstances concerning information security shall always be accurately understood and aggressive action shall be taken in order to take measures smoothly and swiftly.

5. Organizing Internal Auditing System

An internal auditing system shall be organized to carry out the compliance auditing concerning the security policy and the operational manuals of the internal regulations.This auditing shall be carried out regularly and systematically.

6. Constructing System for Information Security

Construction of system that takes measures against any illegal invasions, compromises, alterations, losses and destruction of all information assets, shall be promoted.As a measure, a thorough management shall take place by systematizing the process of writing, backing up, destroying, access controlling, etc. when handling of not only electronic information, but also written information and data.

7. Upgrading Information Security Literacy

An adequate education and training shall be provided to all board members, employees and temporary staffs so that any person who has access to information assets of Advanced Communications Co., Ltd. is equipped with literacy on information security when performing tasks.

8. Administrative System for Subcontracting Company

An adequate evaluation shall be performed on the qualifications of subcontracting companies when concluding a business contract.At the same time, a request to maintain the equivalent or higher level of security level shall be made.In order to strengthen the contract, subcontracting companies shall be reviewed constantly by confirming whether security level is appropriately maintained.

Established on 1st December 2007