Basic Policy on Information Security
SG Holdings ("SGH") believes that it is its social responsibility to protect its information assets, including those entrusted to SGH by its customers, in order to play a role in economic and social development as well as strive to be a useful company for society. It has established the following Basic Policy on Information Security ("Policy"), and is committed to maintaining and managing information security.
Development and Implementation of Internal Rules
SGH shall develop information security rules and other regulations and implement information security measures in accordance with the Policy.
Establishment of an Information Security Management System
SGH shall establish and operate a management system for information security, as well as a system to cooperate with external organizations and others as necessary.
Protection of Information Assets
SGH shall endeavor to prevent any falsification, loss, leakage, unauthorized intrusion, or other interference with the use of its information assets in order to ensure the confidentiality, integrity, and availability of those assets.
Ongoing Provision of Education
SGH shall make every effort to ensure that its directors, officers, employees, and others are thoroughly familiar with the Policy, and will provide the necessary education on information security on an ongoing basis while promoting understanding of roles and responsibilities related to information security.
Response to Threats to Information Security
SGH shall endeavor to ascertain threats to information security and prevent incidents before they occur. In the unlikely event that an incident occurs, SGH shall promptly investigate its cause, prevent the spread of damage, and implement measures to prevent recurrence.
Cooperation with Business Partners
SGH shall, upon exchanging and handling information with business partners, set forth information security requirements in accordance with the nature of the handling of the information and request that it be managed appropriately.
SGH shall also appropriately manage that information in accordance with its importance.
Compliance with Laws and Regulations
SGH shall comply with laws, regulations, and internal rules regarding information security.
Evaluation and Review of Information Security Activities
SGH shall periodically verify that information security is properly operated and maintained, and implement improvement measures as necessary.
Effective November 1, 2026