security policy
Security Policy
Stone System Corporation (“the Company”) believes it is our responsibility to protect all information we handle as a provider of information system services to our customers.
The Company considers information security an important and ongoing priority. We will follow the rules below and put proper systems in place to protect and manage information according to the size and nature of our business.
  1. 1. Definition of Information Security

    Information security is defined as ensuring the confidentiality, integrity, and availability of information.

  2. 2. Scope of Information Security

    This applies to all information related to our business activities that is under our control.

  3. 3. Establishment of an Information Security Management System

    All directors and employees recognize our important social responsibility as a company. We will strictly protect confidential information, comply with personal data protection laws and other related laws as well as our internal rules, and build a system that ensures the confidentiality, integrity, and availability of information.

  4. 4. Systems with Thorough Information Security Measures

    We will take thorough measures to prevent unauthorized access, leaks, alteration, loss, destruction, or disruption of our information assets.

  5. 5. Implementation of Internal Audits

    We will conduct regular internal audits. We will review and check how our information security measures are implemented and whether we comply with related laws, and we will make improvements where necessary.

  6. 6. Implementation of Information Security Education

    We will provide necessary education and training to directors and employees to ensure they understand the importance of information security and are familiar with our information security manuals and other related materials.