Sin-Yun is committed to the establishment of its Information Security Management System and will demonstrate leadership by championing the importance of information security through well-designed policies and its strategic direction. The result of this would allow information security to become ingrained as part of Sin-Yun’s culture.  

Sin-Yun has adopted the following principles for sound implementation of core information security requirements throughout the whole organization including its external vendors and suppliers: 

• Adopt a risk-focused methodology and establishing risk aware culture in the identification of threats, classification of information assets and remediation of weaknesses where confidentiality, integrity and availability of the client, employee and company data is at stake 

• Exercise compliance to regulatory framework as a standard and reinforcing company’s information security posture by adopting the international norms and standards such as the ISO 27001:2022 

• Ensure and stand for corporate information security when establishing and maintaining business relationships with external parties 

• Creating and maintaining a good information security conscious culture 

• Committed to satisfy applicable requirements related to information security 

• Continuously improving effectiveness of information security training and awareness 

Sin-Yun takes its responsibilities for information security very seriously. Any user who breaches the procedures as stated by the ISMS may be liable to disciplinary action and could also be potentially breaking laws and regulations. Breaches of the policy which places Sin-Yun at serious financial, commercial or reputational risk or actual loss may be considered as gross misconduct offences for which dismissal may be an outcome.