Page 49 - 56-1 One Report 2022 EN

Part 1 Business Operation and Operating Performance

nurse room, and canteen; fair opportunities for all types of job candidates; freedom to join association or negotiation;
and employee privacy.

For partners and suppliers, the Company assesses relevant issues, such as using hazardous or unstainable raw
materials in the manufacturing processes; a business operation that impacts the quality of or access to water or
natural resources; equal or comparable payment rates between permanent employees and none permanent
employees (contracted labor, or foreign labor, etc) for the number of working hours, Over Time (OT), and fringe
benefits; workplace environment and safety; training on health and safety in reference to laws; child labor and
forced labor.

Based on the human rights risk assessment mentioned above, the Company has found no significant risk from the
issues assessed. However, if a human rights violation arises, the Company has management measures and
remedies. In particular, in case of permanent employees and/or temporary employees, the Company shall follow
the labor law, employee well-fare benefits, Personnel Policy, and other related measures. In case of suppliers, the
Company shall refer to the Supplier Charter and related laws.

In 2022, there was no occurrence of human rights violations either within the Company or within the value chain of
the Company.
Emerging risks

1. Information security

The Company may be exposed to risks if its satellite control system receives cybersecurity threats from outside due
to its computer system and an internet connection, which could be detrimental to its business.

In view of this risk exposure, the Company sets up a committee to manage IT risks. The committee is responsible
for prescribing guidelines and policies, and assessing and managing IT risk. The committee also regularly assesses
the company’s IT system’s environment, status, and risk management in order to be flexible enough to keep up with
changes in information technology and communication, and designs the satellite control system with minimum
connection to the outside world.
The Company has also been certified with ISO 22301: 2012 Business Continuity Management, and has taken
insurance against cyber threats and a third-party lawsuit in case of a data breach. In particular, the Company
passed the risk assessment criteria by the insurance company prior to renewing the insurance in 2022.

2. Coronavirus pandemic (COVID-19)
The Company considers the coronavirus pandemic a crisis and has set up a specific committee for dealing with
this crisis. This committee issues necessary guidelines based on the pandemic situation, the Company’s Business
Continuity Management Plan, and any advice from the government. It also considers risks and their potential impact
on the Company, employees, stakeholders, and both short-term and long-term supply chains. In this regard, the
Company has measures to manage risks as follows:
1. Set up hand sanitizer in the office.

2. Provide automatic temperature check before employees enter the work area.
3. Reduce meeting arrangements and change the usual format into electronic media.

4. Provide masks, alcohol sprays to distribute to employees and maintain the measure of wearing a hygienic
mask

5. Provide regular disinfection of the workplace.
Part 1 page 35
