Corporate information security management strategy and framework

Management of Information Security Effectiveness

The company continues to address information security risks by conducting third-party assessments and implementing necessary corrections to ensure compliance with industry standards for information security protection mechanisms.

• The industry average is shown as the blue curve, with a score of approximately 83 and a maturity rating of B.
• Acer's data is represented by the black curve, consistently above the industry average throughout the year. Since early April, Acer has maintained a score above 90 and sustained a maturity rating at level A.

Acer has faced an attack from ransomware from a member of our staff accidentally clicking on a phishing mail, and we may face similar attacks in the future. To prevent damage from such attacks, Acer implements related corrective actions and continually works to optimize our practices. For instance, we have reduced the chances for phishing emails to make it to inboxes; strengthened firewall controls and Internet access to prevent malware from expanding to other zones; implemented multi-layer management of privileged accounts to prevent them from being hacked; introduced leading solutions for compliance auditing; imported new techniques to detect and handle malware; and routinely executed vulnerability scans & fixes and test staff awareness.

The future focus of our information security