Data Security

The KWE Group protects the confidentiality, integrity, and availability of information assets with ongoing improvements to information security in order to run our business operations smoothly and earn the trust of our stakeholders. In 2020 the KWE Group established the KWE Group IT Security Policy conforming to the ISO 27001 management framework to improve security globally.

KWE Group will run our business operations successfully and continuously improve its information security in order to increase stakeholders' trust, while maintaining confidentiality, integrity, and availability of information assets. Our Basic Policy includes the following:

1. Build organizational structure to improve our information security
2. Comply with all information security laws, regulations, and other internal rules
3. Regularly evaluate and re-examine measures for information security
4. Reliably protect information assets against threats (unauthorized access, computer virus, etc.)
5. Take measures aimed at enabling the rapid recovery of business activities from setbacks and natural disasters

• Establishing appropriate local IT security policy, planning, and governance
• Implementing appropriate security controls
• Regularly reviewing the suitability, adequacy, and effectiveness of the security controls
• Improving the suitability, adequacy, and effectiveness of the security controls

• Continuing cyber-security measures
• Continuing employee training
• Planning and implementing periodic security assessments
• Continuing risk reduction for data center, server, network, and other risks