項目2

🛡️ 資訊安全（Information Security）

我們致力於建立安全、可靠且值得信賴的數位環境

Committed to a Secure, Reliable, and Trusted Digital Environment

本公司高度重視資訊安全，並持續建立完善的資訊安全管理制度，以保護網站、資訊系統、商業資料及使用者資訊的機密性、完整性與可用性。

我們採用國際資訊安全最佳實務，透過持續改善、風險管理及安全監控，降低資訊安全風險，並提供安全穩定的數位服務。

🔒 1. 資訊安全政策

Information Security Policy

我們建立完善的資訊安全管理制度，並定期檢視與更新安全措施，以降低資訊安全風險，確保網站及資訊系統安全運作。

We maintain a comprehensive Information Security Management Program and regularly review and enhance our security controls to reduce cyber risks and ensure the secure operation of our website and information systems.

🌐 2. 網路安全防護

Network Security Protection

我們採用多層次網路安全架構，包括：

• 防火牆（Firewall）

• 入侵偵測與防禦系統（IDS/IPS）

• 網路流量監控

• 惡意攻擊防護

• 異常行為監測

Our network infrastructure is protected through multiple layers of security, including firewalls, intrusion detection and prevention systems (IDS/IPS), network traffic monitoring, malicious attack protection, and continuous threat monitoring.

🔐 3. 資料加密

Data Encryption

所有重要資料均透過適當的加密技術保護，以降低未經授權存取及資料外洩風險。

網站採用 SSL/TLS 加密通訊，保障資料傳輸安全。

Sensitive information is protected using appropriate encryption technologies. SSL/TLS encryption is implemented to secure data transmitted between users and our website.

👤 4. 存取控制

Access Control

我們採取權限分級管理制度，僅授權人員可依工作需求存取相關資訊。

We apply role-based access control (RBAC) to ensure that authorized personnel may access information only when necessary for their job responsibilities.

💾 5. 資料備份與災難復原

Data Backup and Disaster Recovery

我們定期執行資料備份，並建立災難復原機制，以降低因設備故障、系統異常或其他突發事件造成的營運中斷風險。

Regular data backups and disaster recovery procedures are implemented to support business continuity and minimize operational disruption.

🔍 6. 安全監控

Security Monitoring

我們持續監控網站及資訊系統運作狀況，及早偵測異常事件，並迅速採取適當措施。

We continuously monitor our systems to detect suspicious activities, cybersecurity threats, and operational anomalies, enabling timely response and mitigation.

🛠️ 7. 系統更新與漏洞管理

System Updates and Vulnerability Management

我們定期更新系統、修補安全漏洞及維護軟體版本，以降低資安風險。

We regularly update software, apply security patches, and conduct vulnerability management to maintain a secure computing environment.

📂 8. 個人資料保護

Personal Data Protection

我們依法蒐集、處理及保護個人資料，並採取適當的管理措施，避免未經授權之存取、使用、揭露或遺失。

Personal information is collected, processed, and protected in accordance with applicable privacy and data protection laws.

🚨 9. 資安事件應變

Incident Response

若發生資訊安全事件，我們將立即啟動應變程序，評估影響範圍，採取控制措施，並依適用法令辦理必要之通報與改善。

In the event of a cybersecurity incident, we will activate our incident response procedures, assess the impact, implement containment measures, and fulfill any applicable legal or regulatory reporting obligations.

📋 10. 員工資訊安全管理

Information Security Awareness

我們定期辦理資訊安全教育訓練，提升員工資訊安全意識，建立良好的資訊安全文化。

Employees receive ongoing information security awareness training to promote responsible data handling and strengthen cybersecurity awareness throughout the organization.

⚖️ 11. 法令遵循

Regulatory Compliance

我們遵循適用之資訊安全、個人資料保護及相關法令規範，並持續檢視內部管理制度，以符合最新法規要求。

We are committed to complying with applicable cybersecurity, privacy, and regulatory requirements and continuously improving our internal governance framework.

📞 12. 安全通報與聯絡

Security Contact

如您發現任何網站安全漏洞、異常行為或疑似資訊安全事件，歡迎透過本網站公布之聯絡方式通知我們。

我們將依標準程序進行調查與處理，並於合理期間內採取適當措施。

If you identify a potential security vulnerability, suspicious activity, or cybersecurity issue related to this website, please contact us using the official contact information provided on our website.

We will investigate reported issues promptly and take appropriate actions in accordance with our incident response procedures.

📢 資訊安全聲明

Information Security Statement

本公司致力於維護資訊安全，並持續投入資源提升資訊安全管理能力，以保護網站、資訊系統、商業資訊及使用者資料之安全。

雖然我們採取合理且適當的安全措施，但任何透過網際網路傳輸或電子儲存方式均無法保證百分之百安全。因此，使用者亦應妥善保管個人帳號、密碼及相關資訊，共同維護資訊安全。

We are committed to maintaining a secure digital environment and continuously strengthening our information security capabilities to protect our website, information systems, business information, and user data.

While we implement reasonable and appropriate security safeguards, no method of Internet transmission or electronic storage can be guaranteed to be completely secure. Users are encouraged to protect their account credentials and personal information as part of maintaining overall cybersecurity.