Basic Information Security Policy

Airion Inc. (hereinafter, "the Company") sets forth this Basic Information Security Policy to remain a company trusted by its customers and to fulfill its social responsibility, positioning the maintenance and improvement of information security as one of the key issues in its business activities.

1. Establishing and Complying with Information Security Rules

To adhere to this policy and to comply with all laws and regulations applicable in the regions where it conducts business, the Company establishes internal regulations, guidelines, and other rules, and ensures they are thoroughly followed.

2. Establishing an Information Security Management Framework

To implement information security measures appropriately and reliably, the Company clearly defines its organizational structure and responsibilities. Under this management framework, and as a member of society, the Company shares appropriate information with, and actively gathers information from, external information security organizations.

3. Information Security Education

To implement information security measures appropriately and reliably, the Company works to raise awareness through outreach, education, and training.

4. Continuous Improvement of Information Security Measures

To address changes in legal and regulatory requirements and new information security risks such as cyberattacks, the Company reviews its measures as needed based on risk assessments and strives for continuous improvement. The Company also works to maintain and improve security across its supply chain, including its business partners.

5. Safeguarding and Protecting Information Assets

In accordance with its employee code of conduct, the Company protects important information, including that of customers and business partners as well as its own technical information, from threats that could lead to leakage, tampering, or loss. To protect customer information, the Company strives to ensure the security of its products and services. In the unlikely event of an incident, the Company will promptly take initial response measures, such as preventing further damage, to minimize the impact, and will work to prevent recurrence.

6. Legal Compliance

The Company complies with information security laws and regulations applicable in the regions where it conducts business, as well as with its contracts with customers, business partners, and others.