MiTAC Group Supply Chain Cybersecurity Requirements

This document is a guide outlining the cybersecurity baseline control requirements that suppliers of the MiTAC Group must comply with. It details the necessity for suppliers to establish, implement, and maintain a comprehensive cybersecurity framework to protect the information assets and data of the Company and its clients. The document specifies various obligations for suppliers, including ensuring personnel compliance with cybersecurity standards, establishing an information security organization, and developing a cybersecurity framework that encompasses policies and procedures. It also emphasizes the importance of regular reviews and updates of security measures to align with current threats and best practices. Furthermore, it covers aspects such as personnel security, cybersecurity education and training, authentication and access control, data protection, network monitoring, secure software development, supply chain risk management, incident reporting, and business continuity planning. These requirements are essential for maintaining the security and stability of the supply chain.