Shin Kong Bank's Digital Finance Business Awarded ISO 27001 Information Security Certification ⟦4 Shin Kong Bank passed the ISO 27001:2013 Information Security Management System (ISMS) international certification audit conducted by the ISO verification body British Standards Institution (BSI). A certificate presentation ceremony was held on March 10, 2016 (ROC year 105), where the General Manager of BSI Taiwan Branch presented the certificate, and Shin Kong Bank General Manager Hsieh Chang-jung received it on behalf of the bank. This certification affirms that Shin Kong Bank's information security management system meets international information security standards.

Shin Kong Bank passed the ISO 27001:2013 Information Security Management System (ISMS) international certification audit conducted by the ISO-verified body British Standards Institution (BSI), and held a certificate presentation ceremony on March 10, 105th year of the Republic of China calendar (2016), where the certificate was awarded by the General Manager of the Taiwan branch of the British Standards Institution (BSI), and Shin Kong Bank General Manager Hsieh Chang-jung received the certificate on behalf of the bank. This certification affirms that Shin Kong Bank's information security management system complies with international information security standards.

Shin Kong Bank places great emphasis on information security protection. In recent years, it has successively established various information security control systems. In addition to protecting against external malicious intrusions, it has also actively strengthened internal controls and built superior protection mechanisms. The information technology department introduced the ISO 27001 information security management system and, after undergoing BSI's extremely rigorous pre-assessment, documentary review, on-site audit and other verification procedures, successfully passed the ISO 27001:2013 information security management system certification review, achieving information security management objectives that meet "confidentiality," "integrity" and "availability."

Shin Kong Financial Holding has actively responded to the Financial Supervisory Commission's promotion of the digital finance plan, unveiling "Cloud Computing and Digital Shin Kong" as the strategic focus for 2016 (ROC year 105). In July of last year, Shin Kong Bank was among the first wave of banks to complete the launch of 12 low-risk services under Phase 1 of Bank 3.0, offering cloud service desk online applications for personal loans, credit cards, trust account opening and other services. In January of this year, it further added ATM interbank deposits and online account opening.

While continuously launching new types of information technology financial services, the ISO 27001 information security certification further assures customers of a secure transaction environment. General Manager Hsieh Chang-jung and Chief Information Officer Chang Kuang-tsu emphasized: digital security is the core competitiveness of the financial industry in facing the digital wave of Bank 3.0. Shin Kong Bank will continue to strive to provide customers with faster and more convenient digital financial services under a rigorous information security framework.

In addition, Chunghwa Telecom's information security consulting team spent nearly two years assisting Shin Kong Bank in reviewing all business information processing procedures, strengthening system and network management, establishing system development processes, designing security control mechanisms, and implementing standard operating procedures, covering more than 1,500 security control items. Chunghwa Telecom's information security team members hold more than 35 categories and over 210 professional information security certifications, covering information security and network technology and management, such as CISSP, CEH, CHFI, CompTIA Security+ and others, demonstrating Chunghwa Telecom's long-term commitment and capabilities in the information security field.