1. Basic Policy
MG POWER GROUP OF COMPANIES (hereinafter referred to as "the Company") prioritizes the protection of information assets and requires all employees to understand and comply with the importance of information security. To ensure the trust of customers and business partners, the Company promotes information security based on the following policies.
2. Establishment of Information Management System

• Appointment of Information Security Officer: The Company appoints a Chief Information Security Officer (CISO) to oversee the protection and proper management of information assets.

• Establishment of Information Management Committee: An Information Management Committee is established, and information management officers are appointed in each department to create a system that enables prompt implementation of information security measures.

3. Definition and Management of Information Assets

• Scope of Information Assets: Information assets held by the Company include customer information, employee information, trade secrets, and intellectual property.

• Acquisition and Use of Information: When acquiring information, the purpose of use will be clearly defined, and it will be used only within the necessary scope. Personal information will be managed appropriately in accordance with the Personal Information Protection Act.

4. Data Encryption and Security Measures

• Data Encryption: The Company will encrypt important data to prevent unauthorized access and information leakage. Strong algorithms such as AES will be used for encryption.

• Access Control: Access to information assets will be limited to authorized personnel, and permissions will be reviewed regularly.

• Physical Security: Physical security measures will be implemented at facilities where information is stored, restricting access.

5. Education and Awareness Enhancement

• Employee Training: Regular training on information security will be conducted for all employees to enhance security awareness.

• Improvement of Information Security Literacy: Employees will be encouraged to understand the importance of information security and to take appropriate actions.

6. Auditing and Improvement

• Conducting Internal Audits: Regular internal audits of information security will be conducted to verify compliance with policies and procedures. Necessary improvements will be made based on audit results.

• Continuous Improvement: Information security measures will be continuously reviewed and improved in response to technological advancements and emerging threats.

7. Incident Response

• Incident Response Plan: In the event of an information security incident, a plan will be established to respond quickly and appropriately, including notification to relevant parties, evidence preservation, impact assessment, and recovery measures.

• Implementation of Preventive Measures: The causes of incidents will be analyzed, and preventive measures will be implemented to avoid recurrence.

8. Compliance with Laws and Regulations

• Compliance with Laws and Regulations: The Company will comply with laws, regulations, and industry standards related to information security and will conduct operations appropriately.

This information security policy serves as a fundamental guideline for protecting the Company's information assets and ensuring the trust of customers and business partners. All employees are required to understand.