Cathay FHC and its subsidiaries have all separately established information security policies, which are subject to approval by their respective board of directors, and all examine the confidentiality, completeness, availability, and compliance of information assets through annual inspections.