Sakthi Auto Component Limited believes that knowledge is extremely important in achieving our mission-vision and company goals. In this context, fulfilling our responsibilities for all legal, regulatory, or contractual obligations and all kinds of information security requirements of internal and external interested parties, we protect the Confidentiality, Integrity and Accessibility of our company and our stakeholders with a sustainable approach.

Our main objectives of Information Security are:

1. To minimize the damages that may be caused by data security by effectively managing information security.

2. To think about the possibility of experiencing an information security violation event, and to respond in a coordinated manner.

3. To prevent interruptions in critical business processes, to be able to work again within the targeted recovery period in case it cannot be reached.

4. To ensure that all business processes are integrated, harmonized, and balanced.

5. Comply with all applicable legislation on information security and contracts with third parties (business partners, customers, and suppliers).

6. To ensure the Confidentiality, Integrity, and Accessibility of our customers' information assets within the scope of the Information Security Management System.

7. Protecting our reputation and brand value with our employees, customers, suppliers, and the public.

8. Preparing procedures and instructions to help control our Information Security Management System in accordance with standards; to regularly monitor its effectiveness in line with continual improvement.

9. To proactively defend against modern cyber threats such as ransomware, malware, phishing, and unauthorized network intrusions through advanced security controls.

10. To continuously monitor IT infrastructure and identify, assess, and mitigate security risks proactively.

11. To implement strict access control measures, including Multi-Factor Authentication (MFA) and the 'Principle of Least Privilege', ensuring information is accessed only by authorized personnel.

12. To foster a culture of cybersecurity awareness by providing regular training and updates to all employees, ensuring they act as the first line of defense against cyber-attacks.

We shall appropriately collect, use, provide and manage personal information in consideration of characteristics of our business.

We shall secure the Confidentiality, completeness, and availability of the said information assets by protecting and managing them. Our Company's information assets contain business partners' critical information. Thus, our Company acknowledges that it is our important social responsibility to protect such information assets against alteration, destruction, leakage, and during accidents, and to secure the Confidentiality and the soundness of usage of the relevant information. Therefore, appropriately maintaining and managing information assets is synonymous with establishing and maintaining corporate value.