Information Security Policy

Basic Philosophy

ShareWis Inc. conducts its business under the philosophy of “increasing the value of knowledge.” Information assets, including the information of our customers, are extremely important as the foundation of our management. Our directors and employees, recognizing the importance of protecting information assets from risks such as leakage, damage, and loss, comply with this policy and carry out activities to maintain the confidentiality, integrity, and availability of information assets.

Basic Policy

1. Compliance with standards
   We establish an information security policy and related rules, and comply with applicable laws, regulations, and contractual obligations.
2. Risk management
   We analyze and evaluate risks to information assets such as leakage, damage, and loss, establish a systematic risk assessment method that is carried out regularly, and implement necessary and appropriate security measures.
3. Organizational structure
   We establish an information security organization led by the responsible director, clarify the authority and responsibilities of each director and employee, and provide regular education, training, and awareness activities for employees.
4. Inspection and audit
   We regularly inspect and audit compliance with the security policy and the handling of information assets, and promptly correct any deficiencies found.
5. Incident response
   We establish procedures for responding to security events and incidents and take prompt response and corrective action. For incidents affecting business continuity, we establish a management framework and review it regularly.
6. Continuous improvement
   We establish an information security management system with objectives for realizing our basic philosophy, and continuously review and improve it.