征途国际

To build and implement an end-to-end network security and privacy protection system is one of Digital China’s important development strategies. Based on compliance with applicable national and regional laws and regulations, international standards and by referring to regulatory authorities and customer requirements and industry best practices, Digital China has built an effective, sustainable and reliable network security and privacy protection system and actively cooperates with relevant governments, customers and industry partners to jointly address the relevant challenges. Digital China has fully understood the importance of privacy protection and is committed to protecting the personal data of consumers, clients, suppliers, partners, employees and other related entities in accordance with applicable national privacy protection and personal data protection laws and regulations.

Digital China has established the Network security and User Privacy Protection Committee in IT and Infrastructure Department as the relevant top class management organization for making and approving the overall network security and privacy protection strategy, for leading the team to formulate network security and privacy protection strategies and policies, and for managing and supervising the implementation of network security and privacy protection throughout the Group and its subsidiaries.

Digital China has comprehensively implemented the end-to-end global network security and privacy protection system in terms of policies, processes, tools, technologies and specifications in all business areas, and taken the following key measures to ensure network security and privacy protection:

1. Based on business scenarios and risk groups, identify network security and privacy protection risks and formulate corresponding management requirements and integrate management requirements into relevant business processes, IT systems and tools by each business unit.

2. Establish an end-to-end network security and privacy protection & verification system, and routinely carry out measurement, inspection and internal audit; meanwhile, cooperate with third parties to carry out testing, certification, external audit and other activities to continuously enhance the management level of network security and privacy protection.

3. Implement training, education and examination on awareness of network security and privacy prot