The highest governance unit of the company is the Board of Directors, which has three functional committees: the Compensation Committee, the Audit Committee, and the Corporate Sustainability Development Committee. The Board of Directors has a sound governance structure that helps the company fully grasp business strategies and operational performance, respond to various risk changes, and create sustainable value. In 2024, the company's corporate governance performance was recognized in the 10th "Corporate Governance Evaluation," ranking in the top 6-20%. We continue to build a sound governance structure, consistently strengthening corporate governance goals, and achieving them through several internal policies.
※ For details, please refer to the Major Internal Policies
The Corporate Sustainability Development Committee is responsible for setting and reviewing the company’s sustainability policies, systems, and related management guidelines, reporting annual sustainability performance and subsequent work plans to the Board of Directors at least once a year. The Board supervises the formulation and execution of the company’s sustainability management policies, strategies, and goals. The Board reviews the submitted reports and, if necessary, urges adjustments.
The latest meeting was held on May 5th, 2026, and the main agenda included:
1. Report on the company's sustainability performance in the first half of 2026 and expected key work to be completed.
2. Progress and outcomes of the company’s greenhouse gas inventory and verification.
3. Results of the company’s 2025 Sustainability Report.
The company has a Board-approved "Risk Management Policies And Procedures", with the General Manager responsible for overseeing the promotion and operation of the risk management plan. Various departments have designated units responsible for promoting risk management related to their respective business areas. Risk is assessed annually and reported to the Board of Directors. The company conducts risk assessments of significant issues related to the materiality principle of the sustainability report and formulates relevant risk management policies or strategies based on these assessments.
On November 11th, 2025, the "Corporate Sustainability Development Committee" and the Board of Directors reported on major environmental, social, and governance (ESG) issues and the related risk management operations and execution results.
Chicony Power has established a Code of Ethical Conduct in accordance with the RBA Code of Conduct and the Guidelines for the Adoption of Codes of Ethical Conduct for TWSE-/TPEx- Listed Companies, which encompasses required regulations related to anti-corruption, bribery, insider trading, intellectual property, proper information preservation and disclosure. To ensure the effective implementation of ethical management, the Company, prior to establishing business relationships, not only conducts a thorough assessment of the legality and ethical management policies of suppliers, customers, and other business partners but also requires suppliers to sign the Integrity Statement. The Statement clearly states that all transaction counterparties should strictly abide by the Company’s ethical management regulations without involving themselves in any kickbacks, commissions, improper gifts, or other improper advantages.
To implement ethical management and anti-corruption governance, Chicony Power conducts regular corruption risk assessments at all operation bases and incorporates internal controls and audit mechanisms management based on the characteristics of the identified risks. The Company follows its internal control system to conduct a 100% corruption risk assessment of its operation bases. The assessment scope includes the headquarters and all production bases, ensuring that the ethical risks of overall operational activities are included in the monitoring framework. The results of the risk assessment for 2025 indicate that no significant corruption risk events or high-risk units have been identified. The auditing unit has completed its review of compliance with the system and found no significant instances of fraud, corruption, or violations of ethical principles.
Chicony Power also strengthens employees' ethical awareness and professional ethical standards through the Ethical Corporate Management Best Practice Principles and the Integrity Statement signed by all staff members. The auditing unit continuously conducts random checks and verification mechanisms to ensure that the ethical policy is implemented in daily operations.
2025 Annual Statistics on Ethical Management and Prohibition of Improper Benefits Promotion:To enhance the ethical management system, the Company has established the Ethical Management Promotion Taskforce, which is jointly composed of the Administration Management Division, the Financial Center, and the Audit Office. The task force is responsible for the formulation, the supervision and implementation of the Company’s ethical management policy and prevention programs; and makes annual reports to the Board of Directors on the implementation status. In addition, the Company has established the Regulations for Reporting and Complaint-filing Management and set up a reporting and complaints mailbox, email, and hotline to ensure the effective operation of the reporting mechanism. Ethical management promotion is conducted during management meetings, and each production base continues to promote ethical management and the reporting and complaints system. The implementation status of the 2025 Ethical Management was reported to the Board of Directors on November 11th, 2025.
Key responsibilities (summary):
1. Formulating anti-fraud measures to ensure ethical business.
2. Developing measures to prevent unethical behavior.
3. Planning internal organization, staffing, and functions, ensuring mutual supervision and checks and balances.
4. Promoting and coordinating the implementation of ethical policy training.
5. Planning the whistleblowing system and ensuring its effective execution.
6. Assisting the Board of Directors and management in auditing and assessing the implementation of ethical business practices.
To safeguard the company’s reputation and protect assets, prevent corruption, theft, misappropriation, or other illegal activities, and protect the rights of the company, employees, and partners, Chicony Power provides official channels for employees and partners to report illegal activities, aiming to handle complaints effectively, deter illegal actions, and avoid the inconvenience caused by unfounded anonymous letters, thereby maintaining the company’s and law-abiding individuals' reputation and rights.
Whistleblowing Channels:1. Complaint Mailbox: 30F, No. 69, Sec. 2, Guangfu Road, Sanchong District, New Taipei City, 241
2. Complaint Email: [email protected]
1. Establishment of a Regulations for Reporting and Complaint-filing Management outlining the whistleblowing procedure:
2. The investigation standards for whistleblowing cases are clearly defined, with the head of the Administration Department responsible for handling, investigating, and responding to complaints while ensuring the whistleblower’s identity and the content of the complaint are kept confidential.
3. Protecting whistleblowers from inappropriate treatment due to their complaints, ensuring the confidentiality of their identity and complaint content.
The company’s website includes a section on sustainable development and corporate governance, allowing stakeholders to understand the company’s sustainability progress and governance status. It also provides contact channels for stakeholders to share concerns and receive appropriate responses. The annual report to the Board includes a review of sustainability initiatives and stakeholder communication.
On November 11th, 2024, the Corporate Sustainability Development Committee and the Board reported on the company's stakeholder communication activities.
Cybersecurity underpins product quality, resilient operations and trust across our supply chain. We take a risk-based approach to protecting information assets, operational systems, production sites, and clients/ suppliers’ data. We work to maintain confidentiality, integrity and availability of information while meeting legal requirements in the countries where we operate and sell our products, as well as the requirements from our clients.
The Information Security Management Committee at Taipei Headquarters overseas our cybersecurity policy. We maintain ISO/ IEC 27001 certification for our cybersecurity management system, with internal and external audits, threat monitoring, vulnerability management, and employee training. Each principal production site has a designated cybersecurity contact to help put these requirements into practice.
Our cybersecurity policy and management framework provide a common foundation for two areas of focus, each addressing different operational needs and risks:
1. Internal Business Operation: We protect the confidentiality, integrity and availability of the Company and employees’ information and safeguard privacy. This helps keep our systems stable, our data secure and our critical business activities and IT services running, with the ability to recover from disruptions.
2. External Clients and Supply Chain: We address cybersecurity and data protection needs across our manufacturing operations, client relationships and supply chain. Based on the risks involved, we set requirements for global brand clients, suppliers, contractors, outsourced service providers and other third parties.
We set phased goals that reflect changes in our business, technology, legal requirements and stakeholder expectations. Clear responsibilities, cooperation across departments and risk assessments help us make cybersecurity part of daily operations and key business decisions.
The function teams deliver these goals through annual plans. Management reviews, internal audits and external certification audits assess progress and effectiveness. We use the findings, together with changes in risk, to guide corrective action and improvements, strengthen security oversight and make our operations more resilient.
| Indicator | Result | Scope/ Details |
|---|---|---|
| Cybersecurity Meeting | 20 sessions | All Reporting-coverage Sites |
| Cybersecurity Awareness Training/td> | 16 sessions／652 attendances | ◎ All Reporting-coverage Sites ◎ Target Audience: Core system administrators and employees identified as engaging in high-risk online activities |
| Recovery Simulations | 9 simulations | All Reporting-coverage Sites |
| Social Engineering Simulations | 2 sessions | ◎ Taiwan Headquarters ◎ Target Audience: All employees at Taiwan Headquarters |
| Major Cybersecurity Incidents | 0 | 2025.01.01 – 2025.12.31 |
| Substantiated Complaints about Client Privacy Breaches or Data Loss | 0 件 | 2025.01.01 – 2025.12.31 |
2026 Training Performance on Personal Data and Privacy Protection
| Course Name | Number of Employees Completed Training |
Assessment Pass Rate |
|---|---|---|
| Personal Data and Privacy Protection |
642人 | 85.6% |
