Information Security

Information Security

Cybersecurity Governance & Commitment

To comprehensively strengthen our information security defenses and cultivate strong cybersecurity awareness among employees, BoardTek Technology formally established the Information Security Risk Management Committee in July 2019. The Committee is responsible for the overall review of cybersecurity policy governance, protection planning, supervision, and execution across all business units.

Risk Transfer & Protection
To mitigate operational risk, the Company continues to maintain Cybersecurity Liability Insurance (the most recent policy effective from August 2025). Through this comprehensive insurance mechanism, we provide substantive protection against the risk of penalties or claims arising from the inadvertent disclosure of critical information, demonstrating a responsible corporate attitude.

Operating Model of the Information Security Organization

Information Security Strategy & Compliance

Through multi-faceted protection strategies and rigorous regulatory compliance, we continuously strengthen the Company’s cybersecurity posture.

Cybersecurity Governance Strategy

– Refining the Management System
Continuously optimize the Information Security Management System (ISMS), and enhance security infrastructure design and data-protection technologies.

– Risk Control & Prevention
Strengthen cybersecurity education and training for all employees, raise security awareness, and proactively identify and defend against potential threats.

Regulatory Compliance & Audit

– Establishing Compliance Mechanisms
Establish and enforce cybersecurity mechanisms that comply with both international and domestic regulations to ensure that all business activities are lawful and compliant.

– Periodic Review & Revision
Periodically review and progressively revise relevant operating standards to ensure that the Company’s cybersecurity standards keep pace with the times.

Implementation Performance & Records

A continually deepening cybersecurity governance journey

FY 2026 (ROC Year 115)
Incident Response
Date of incident: 2026/01/27

Cause: The Company’s information systems were subject to a hacker cyberattack.

Response process: Defense and recovery procedures were activated immediately to prevent impact on cybersecurity.

Estimated impact: To date, no leakage of personal data, confidential information, or critical document data has occurred; the incident is currently assessed as having no material impact on the Company’s operations.

Insurance claim: Not applicable.

Improvement & response: The Company will continue intensive monitoring and further strengthen the controls over its network and information infrastructure to safeguard information systems.
On August 6, the cybersecurity governance report was presented to the Board of Directors; renewal of the Cybersecurity Liability Insurance was also completed within the same month.

FY 2025 (ROC Year 114)
FY 2024 (ROC Year 113)
On August 9, a project report was presented to the Board of Directors, and the Cybersecurity Liability Insurance was secured.
On August 9, a project report was presented to the Board of Directors, and the Cybersecurity Liability Insurance was secured.

FY 2023 (ROC Year 112)
FY 2019–2022 (ROC Years 108–111)
Since ROC Year 108 (2019), a project report has been presented to the Board of Directors each August, and the Cybersecurity Liability Insurance has been continuously maintained, building a long-term protective net.

FY 2026 (ROC Year 115)
Incident Response
Date of incident: 2026/01/27

Cause: The Company’s information systems were subject to a hacker cyberattack.

Response process: Defense and recovery procedures were activated immediately to prevent impact on cybersecurity.

Estimated impact: To date, no leakage of personal data, confidential information, or critical document data has occurred; the incident is currently assessed as having no material impact on the Company’s operations.

Insurance claim: Not applicable.

Improvement & response: The Company will continue intensive monitoring and further strengthen the controls over its network and information infrastructure to safeguard information systems.
FY 2025 (ROC Year 114)
On August 6, the cybersecurity governance report was presented to the Board of Directors; renewal of the Cybersecurity Liability Insurance was also completed within the same month.
FY 2024 (ROC Year 113)
On August 9, a project report was presented to the Board of Directors, and the Cybersecurity Liability Insurance was secured.
FY 2023 (ROC Year 112)
On August 9, a project report was presented to the Board of Directors, and the Cybersecurity Liability Insurance was secured.
FY 2019–2022 (ROC Years 108–111)
Since ROC Year 108 (2019), a project report has been presented to the Board of Directors each August, and the Cybersecurity Liability Insurance has been continuously maintained, building a long-term protective net.

Previous Next

FY 2026 Execution Status

100

Data Leakage Incidents
No leakage of personal data or confidential information.

100

Defense & Recovery Mechanisms
Response activated immediately upon incident; no material impact on operations.

100

Strengthened Controls
Continuous intensive monitoring and infrastructure hardening to ensure system security.

Cybersecurity Governance & Commitment

Information Security Strategy & Compliance

Implementation Performance & Records

FY 2026 (ROC Year 115)

FY 2025 (ROC Year 114)

FY 2024 (ROC Year 113)

FY 2023 (ROC Year 112)

FY 2019–2022 (ROC Years 108–111)

FY 2026 (ROC Year 115)

FY 2025 (ROC Year 114)

FY 2024 (ROC Year 113)

FY 2023 (ROC Year 112)

FY 2019–2022 (ROC Years 108–111)

FY 2026 Execution Status

Cybersecurity Training & Investment Outcomes