Furthermore, we devised Personal Information Handling Policy and Personal Information Infringement Management Policy ; held annual information security meetings to review stakeholders’ opinions regarding our personal information management system, risk assessment results, and review taskforce reports; and conducted emergency response drills on a yearly basis.