CWB Information Security Policy
 
Personal Information Collection and Use
  • Personal information will be used only for specific purpose related to the service the CWB provides and will not be disclosed to any third party in accordance with the Computer-Processed Personal Data Protection Law and other related regulations.
  • When you use the CWB web site, we will automatically collect the following information: date and time, the webpage you request, URL you are on, browser type, and any action (such as downloads, etc) whether that action was successful or not. The information may help improve the efficiency of our web site.
  • The CWB will monitor any action which may cause a heavy load to our web site.
Information Security Personnel Management and Education
  • For employees who deal with sensitive and confidential information and those who are entitled to manage systems because of job requirement, clear division of labor will be arranged in order to disperse rights and duties; and evaluation and examination systems will be established, as well as mutual support systems.
  • For employees who resign (ask for leave, suspended from duties), all related security measures should follow concerned procedures and the authorization to all systems will be terminated immediately.
  • Depending on positions and occupational ability of different levels of employees, education and training for information security will be conducted, in order to help them understand the importance and all possible risks, and to enhance the awareness of conforming to the relative regulations accordingly.
Information Security Procedures of Protection
  • The CWB will establish operation procedures for information security issues, and impose necessary responsibilities on employees concerned in order to respond to any related event promptly and efficiently.
  • The CWB will establish reporting mechanisms for information systems and facilities change management to avoid loopholes in security.
  • The CWB will process and protect personal information with caution in accordance with related provisions of Computer-Processed Personal Data Protection Law.
  • The CWB will establish system backup facilities for a periodical update/backup of essential data and software to be able to restore all data immediately during natural damage or storage media failure.
Internet Security Management
  • The CWB will establish firewalls over our link to monitor data transmission and resource access between the external and the internal network, and will strictly conduct identification operation.
  • Confidential and sensitive information or documents regarding the CWB web site will not be stored in open system nor be delivered by e-mail.
  • The CWB will periodically examine and inspect internal network for information security purposes, virus code update, and other security measures.
System Access Control Management
  • The CWB will set up password issuance and change procedures depending on operation system and security management requirement, and will keep a record.
  • The CWB system management staff will be responsible for granting operation systems account and password according to different authority and making them update regularly.