 Information Security Policy
In order to guarantee the security of the information system and set up a trusting environment, relevant users require authorization, through normal application procedures, to read, save, and withdraw confidential information in the scope of authority. During the period of authorization, the user should ensure that information is correctly used, in data processing, transmission, and storing and prevent the information and the system from being altered or modified, by unintentional or intentional actions. The user should also guarantee the rights of intelligence, proprietary, and personal information under the proper protection procedures to avoid improper use.
To ensure the collection and application of personal data will be protected by the regulations of personal data protection procedures and relevant decrees. It may only be used for specific purposes (undertaking business and services and is required to offer) and may not be arbitrarily revealed to third parties.
According to the principles of simplicity, easy memory, and the management objectives of information safety, the policy statement of information safety can be divided into two general orientations:
1.Guarantee the security in the operational environment of the information system, strengthen information safety management, and offer high-quality services to colleagues and citizens.
2.Well protect the confidential information, ensure intact and correct procedures and data, and continuously offer services of priority through habit forming without any issue generated.
|
|
