Risk Management
In 2023, the company established the "Risk and Safety Management Policy and Procedure" and set up a Risk and Safety Management Committee. The committee members are appointed by the CEO and are responsible for consolidating risk and safety issues, reporting to the Audit Committee and the Board of Directors on risk and safety issues at least once a year.
Organizational Chart
Based on Enterprise Risk Management (ERM), ISO 31000, and other international standards, the company integrates significant risks encountered during operations, considering internal and external risk factors and stakeholders' concerns. Through various implementation representative meetings and operational units (functional representatives/teams), risks are identified and analyzed. Industry peers, the World Economic Forum, and The Economist Global Risk Report are referenced. The Risk and Safety Management Committee consolidated 426 risk factors and 108 risk items into 68 risk items under ten categories.
Risk Grading
Matrix analysis results show 7 high risks, 16 medium risks, and 45 low risks. High risks are summarized as:
1. Technological changes impacting the industry
2. Trade protectionism and geopolitics
3. Information security
Measures have been formulated and reported to the Board of Directors on February 26, 2024, and the promotion of a risk awareness culture will continue.
Risk Matrix
Risk Network
Risk Response Strategies
Regulatory Compliance
Wiwynn continuously monitors regulatory changes and revises its policies accordingly to strengthen compliance management. An annual compliance audit is conducted to manage risks. In 2023, there were no major violations. The company has established an RBA Management Committee, committed to adhering to the RBA Code of Conduct and encouraging suppliers to follow suit. Various ISO management systems are implemented to enhance risk management, focusing on environmental protection, waste reduction, carbon emission reduction, energy efficiency, human rights protection, and workplace safety.
Training Status on Global Management System Related Courses 10,831 people 14,042 hours
Information Security
Information Security Management Organization
A cross-departmental top-level Information Security Management Committee has been established to oversee current status, strengthen management, and ensure agile response. The Chief Information Security Officer reports to the Board of Directors annually, with the most recent report presented on January 8, 2024. The Board supervises information security issues.
Information Security Management Procedures
In December 2023, Wiwynn passed ISO 27001:2013 certification, covering critical systems and infrastructure at the Taipei headquarters and the data center in Tainan, with an operational site coverage rate of approximately 51% (note). The company will gradually expand the certification scope to include other operational sites such as the Tainan factory and the subsidiary in Mexico.
Note: The Taiwan headquarters has obtained ISO 27001:2013 certification. The coverage rate is calculated as a percentage of the total number of employees at the Taiwan headquarters compared to the total number of indirect employees globally.
Tax Governance
Wiwynn employs a robust tax strategy focusing on "Legal Compliance," "Information Disclosure," "Risk Management," and "Integrity Communication." The "Tax Policy" was approved by the Board of Directors and became effective on February 22, 2022.
