01 Meeting stakeholder requirements and applicable laws and regulations in accordance with the Information Security Management System through the international ISO 27001:2022 standard.
02 Providing a framework aligned with information security objectives and supporting the achievement of the company’s goals.
03 Committing to delivering services to high quality standards, ensuring timely and efficient solutions for transaction management and information services for relevant parties.
04 Maintaining the confidentiality, integrity, and availability of information assets belonging to interested parties.
05 Implementing risk-based information security controls in accordance with the principles of asset value, relevant threats, and vulnerabilities.
06 Continuously improving the Information Security Management System and enhancing the awareness and competence of human resources.