information security management framework, regular reviews of all ASEH subsidiaries’ information security management and incident response plans, and the submission of the information security governance report to the Board of Directors in the last quarter of each fiscal year.