1. Risk Management Policies and Procedures The Company has established the “Risk Management Policies and Procedures,” which were approved by the 17th Board of Directors at its 10th meeting on November 11, 2020. 2. Risk Management Scope

Risk Category Main Risk Items
Strategic Risk Risks resulting from misaligned business strategies or losses incurred through mergers and acquisitions.
Operational Risk Risks related to operational policies, investments in new businesses, R&D, protection of intellectual property rights, legal compliance, talent recruitment and retention, and corporate image building and maintenance.
Financial Risk Including market risk, credit risk, liquidity risk, and operational risk.
Hazard Risk Safety protection and emergency response risks related to major incidents such as earthquakes, fires, or pandemics.
Regulatory Risk Risks arising from non-compliance with laws and regulations, unenforceable contracts, acts beyond authority, omissions in contract terms, or inadequate provisions leading to contract invalidity and potential losses.
Information Security Risk Risks that threaten the confidentiality, integrity, or availability of the Company’s information assets, including unauthorized access, incorrect or incomplete processing methods, or inability of authorized users to access information when needed.
Other Risks Any additional risks not mentioned above should be addressed with appropriate risk control procedures based on their characteristics and impact level.

3. Risk Management Framework and Responsibilities The Company’s risk response framework is led by the Board of Directors as the highest authority. The Corporate Governance Officer is authorized to serve as the Risk Management Coordinator, responsible for directing and coordinating the promotion and operation of both risk supervision and day-to-day risk management.



4. 2024 (Year 113) Operational Status (Reported by the Corporate Governance Officer to the Board on November 13, 2024)
In accordance with the “Risk Management Policies and Procedures,” operational risk management was effectively implemented.
Continued to strengthen company-wide risk awareness by including “hazard risk and information security” courses in the onboarding training for new employees.
In 2024, all risk management units reported no anomalies in the processes of risk identification, risk assessment, risk monitoring, and risk reporting/disclosure.

Added to Cart
Shopping Cart Updated
Network error, please try again!