TECHCHANDRA, a consulting firm providing comprehensive consulting services, provides various services by utilizing TECHCHANDRA intellectual property based on confidential information disclosed to TECHCHANDRA by its clients.

Although TECHCHANDRA has consistently implemented business ethics as a professional in its business conduct and has been striving for the establishment of an information management framework, TECHCHANDRA has recognized the need to expressly reiterate its understanding that information security is one of the most important issues concerning the management and the business operation of TECHCHANDRA.

TECHCHANDRA therefore establishes a basic policy on information security (the “Information Security Policy”) and will appropriately protect all information assets that TECHCHANDRA deals with by ensuring that TECHCHANDRA directors, officers and employees abide by the Information Security Policy set out below.

1. Establishment of Information Security Management System (“ISMS”)

TECHCHANDRA ensures that all directors, officers and employees understand the importance of information security. TECHCHANDRA establishes ISMS to ensure appropriate management of information assets and continuously seeks to improve ISMS.

2. Legal and Regulatory Compliance

TECHCHANDRA ensures that its framework for information security is in compliance and conformity with the relevant local laws, regulations and other various standards. TECHCHANDRA also fully complies with the spirit of those laws, regulations and other various standards.

3. Information Assets Protection

To appropriately protect information assets of TECHCHANDRA and TECHCHANDRA clients from threats to confidentiality, integrity and availability of such information assets and to ensure the continuity of TECHCHANDRA business, TECHCHANDRA formulates appropriate management plans for information assets of TECHCHANDRA and TECHCHANDRA clients for not only TECHCHANDRA each department, but also TECHCHANDRA business partners, having regard to their business activities and the form of their business.

4. Education and Training

TECHCHANDRA will continuously train and educate its directors, officers and employees to raise their awareness of information security and implement an information security system in all of its business activities.

5. Incident Response

TECHCHANDRA implements appropriate measures to prevent incidents relating to information security. In the event that such incidents occur, not only TECHCHANDRA promptly deals with such incidents, but also takes steps to prevent the recurrence of similar incidents.

Last modified date: January 30, 2025