Radiant Opto-Electronics upholds four key visions "enhancing personnel competence, preventing data leakage, strengthening daily operations, and ensuring service availability" and actively promotes an information security management system across the organization. In terms of information security governance, the head of the Group’s Information Management Division serves as the highest-ranking information security officer, and the company has obtained ISO 27001:2022 Information Security Management System certification. In 2025, there were no major information security incidents at Radiant Opto-Electronics. (A material information security incident referred to an information security matter that had been classified as a Level 4 incident under the management measures and that involved serious leakage, tampering, or interruption of core information and communication systems, affecting the Company's operations.)

Radiant Opto-Electronics Information Security Policy Objectives:

 (1) To promote and strengthen information security management in compliance with external laws and regulations, as well as information security requirements stipulated in customer contracts. To enhance information security, incident response plans and procedures to ensure the continuity of company business operations.
 (2) Information security is the shared responsibility of all employees. All personnel must assume security obligations corresponding to their job functions, adhere to the company's security policies and guidelines, and proactively report any suspicious activities or incidents. To foster a culture of information security, we conduct regular education and training to raise personnel's security awareness and reinforce their understanding of related responsibilities.
 (3) To ensure the integrity and security of data, we continuously enhance information security governance and control measures. This protects business-related information from unauthorized access and modification, thereby safeguarding the company's competitive advantage.
 (4) The scope of the Information Security Management System (ISMS) covers all internal employees and external personnel, such as outsourced service providers and visitors. We conduct regular internal and external audits to ensure that all related procedures are effectively implemented.
 (5) To establish an information security policy that complies with legal regulations, international standards, and customer requirements. This policy is regularly reviewed and updated to ensure the continual improvement of the information security system's effectiveness, suitability, and relevance.

Information Security Committee Organization

Radiant Opto-Electronics established the Information Security Committee to ensure that information security-related policies align with the Company's strategy and effectively implement security objectives and measures. The Information Security Committee shall hold a "Management Review Meeting" once a year and may convene ad hoc meetings as needed. Each year, through internal and external audits, we verify that our operational practices comply with regulations and conduct regular reviews and corrections.

Information Security Risk Impact and Response Strategies

After identifying and assessing the information security risks, the information department immediately implements preventive measures to strengthen the protection capacity of information security through the intelligent application of software and hardware systems. The expectation is to eliminate threats in the shortest possible time to ensure that the Corporation can maintain normal operations.

Information Security Risk and Vulnerability Protection

Radiant Opto-Electronics has established control strategies and practices to address the financial impact of information security risks and vulnerabilities. To strengthen group-wide information security controls, Radiant Opto-Electronics has implemented a Multi-Factor Authentication (MFA) mechanism to enhance identity verification security. Regarding the reporting process, if an employee identifies a suspected information security risk, they must contact the Information Security Working Group and notify their direct supervisor.

As most of the information systems supporting Radiant Opto-Electronics' group-wide operations are housed in the Kaohsiung plant's data center, ensuring continuous system service is critically important. Therefore, key systems within the plant adopt a multi-server mutual backup mechanism and are also backed up at different off-site data centers. Together with data backups for critical servers, services can be restored within a short period when necessary, reducing the risk of operational disruptions. In 2025, Radiant Opto-Electronics did not receive any substantiated complaints alleging customer privacy infringements, nor did it receive any related complaints from regulatory authorities. In addition, Radiant Opto-Electronics continued to invest in information security, and no incidents of customer data leakage, theft, or loss occurred during the reporting period.

From Digital Transformation to GenerativeAI: Mastering the Innovation

Responding to the new wave of AI sweeping the globe, digital transformation has become a key driver in corporate economic activities. Radiant Opto-Electronics has initiated a series of studies on generative AI and formally launched the development of its "G.AI Assistant Ecosystem." Through the cross-departmental exchange of project experience, this initiative fosters innovative thinking for generative AI applications.

At Radiant Opto-Electronics, the IT Management Department maintains the company's artificial intelligence policy. It has also developed a proprietary enterprise generative AI platform, the "RuiAI System" (睿語). This platform provides a diverse range of generative AI-assisted functions, enhancing the security, precision, and efficiency of work execution across the entire corporate value chain.

Radiant Opto-Electronics generative AI usage guidelines:   

1.  Users must exercise caution when using generative AI, carefully review all generated content, and are strictly prohibited from inputting any confidential information, Personally Identifiable Information (PII), or data not authorized for public disclosure.

2.  When using generative AI tools, users are required to independently verify the accuracy of the generated content. The output from these tools should not be accepted without scrutiny, and under no circumstances should generated content be used directly as a final work product.

3.  It is strictly forbidden to input any confidential data, trade secrets, know-how, personal data, or any material involving the intellectual property rights of the company, its suppliers, customers, or other partners into external commercial generative AI tools such as ChatGPT. All related applications must be restricted to company-approved internal platforms (e.g., the RuiAI System) to ensure cybersecurity.

Radiant Opto-Electronics Artificial Intelligence Policy

1.  Respect data privacy when using and/or developing artificial intelligence.

2.  Protect system cybersecurity when using and/or developing artificial intelligence.

3.  Maintain human involvement in critical decisions and allow for human intervention.

4.  Clearly define the scope and permissions of artificial intelligence.

5.  Do not use or deploy AI systems engaged in manipulative practices, exploitation of vulnerabilities, social scoring, or unauthorized biometric surveillance (i.e., systems prohibited by the EU AI Act).

6.  Continuously collaborate with suppliers to prevent potential biases when using and/or developing artificial intelligence.

7.  Ensure the explainability of results/decisions generated by AI by providing data sources or reference documents.

8.  For results generated by AI models/tools, assign IT administrators to provide operational support.

9.  Prioritize collaboration with cloud service providers who have made carbon neutrality commitments to reduce our ecological footprint.