sustainability vision | fitipower integrated technology inc.-九游会登陆

under the premise of legal compliance and ethical corporate management, we will continue to strengthen the assessment and response of operational risks and opportunities; optimize external communication channels; establish a convenient, quick, accurate, and secure information network; and develop the core literacy and attitude required for sustainable development.

goals

achieved

on-going

issue	goal	2022 target
governmance mechanism	board meeting attendance increases by 5% annually (compared to the target set in the previous year) average study hours per director reach 6 hours no significant defects in internal control project review	board meeting attendance > 85%
		average study hours per director reach 6 hours
		no significant defects in internal control project review
complaince	no significant violation cases occur	no significant violation cases occur
ethics	annual required courses are taken at a completion rate of 100%	establish annual required courses (integrity, ethics, insider trading)
disclosure	corporate governance evaluation ranked top 20% engagement in both domestic and international sustainability assessments	corporate governance evaluation ranked 21% to 35%
cybersecurity	continue to build a comprehensive cybersecurity management system to eliminate the risk of financial impact and goodwill damage arising from cybersecurity events by implementing external defense, internal control and improvement of the overall cybersecurity awareness among the employees.	implement iso 27001 and obtain third-party validation

fitipower organizational chart

governance structure

regulatory compliance and professional ethics

the total hours of training received by employees in 2022 was 1,213. we have a reporting mailbox (wb@fitipower.com) and encourage internal and external stakeholders to report unethical and improper behavior. a bonus less than nt$10,000 will be granted to the whistleblower depending on the severity of the case. the whistleblower is guaranteed not to be treated inappropriately due to the whistleblowing. fitipower did not face any ethical corporate management violation cases in 2022 or identify any violations of laws or internal regulations (including and laws and regulations governing environment, health and safety, labor, marketing and promotion and product labeling, unfair competition).

risk management

all management units must periodically assess and review risk issues. after the president make advanced and professional judgments based on his risk business experience, the development of preventive action, controls, and related alerts of critical risk issues in business management are reported to the board periodically.

cybersecurity

we continue to invest in resources to build up our information security protection capabilities. therefore, we introduced a two-factor authentication (2fa) and device identification in 2022 in response to the rise of remote demand. in addition, to ensure that fitipower’s information management is effectively executed and is able to face potential risks, we established iso 27001 information security management system, security operation center (soc), and an information security committee in 2022. by upholding the pdca cycle management principle, we have built a comprehensive information security risk assessment and management system to ensure the achievement of objectives and continuous improvement. the management of the system focuses on three major aspects: “external defense”, “internal control”, and “cybersecurity awareness”, and is expected to be certified by a third-party entity in 2023. the information security committee reports to the board of directors on its operations and planned actions on a regular basis. in 2022, no complaint regarding the breach of customer privacy and information theft, leakage, and loss was reported. we implemented one information security drill (phishing drill) and arranged post-hoc training and tests for employees with insufficient information security awareness. all these employees have passed the post-hoc tests to ensure the effective implementation of the information security policies.