The Cathay Century Insurance Board of Directors established the "Cathay Century Insurance Risk Management Policy" to serve as a risk management standard, with the Risk Management Committee set as the highest supervisory unit for risk management decision-making. The Risk Management Committee also implements the risk management decisions of the Board. We have formulated associated risk management mechanisms for our 10 main risks, implement risk monitoring procedures each month, convene quarterly Risk Management Committee meetings, and report risk information to the Board to obtain approval on risk management mechanisms.
The internal control processes and systems of Cathay Century Insurance were established in accordance with the "Regulations Governing Implementation of Internal Control and Auditing System of Insurance Enterprises." Relevant processes were designed and developed by various departments at headquarters and approved by the Board of Directors. All systems include considerations related to environmental control, risk assessment, control operations, information and communication, and supervision operations. Implementations are carried out by the Board of Directors, executives, and other employees in accordance with internal control systems to enable sound corporate operations and ensure achievement of various objectives.
Cathay Century Insurance established the "Cathay Century Insurance Code of Practice for the Three Lines of Internal Control Defense" in accordance with the "Insurance Industry Code of Practice for the Three Lines of Internal Control Defense" to form a three-line structure for internal control which clearly delineates the authority and responsibility scope of the three lines of defense, and is used to strengthen risk control, communication, and coordination of all internal units, enabling our employees to understand the roles and functions of their jobs in our overall risk management structure and internal control, enabling hierarchical risk management implementations. Additionally, we also enhance reviews of risk management mechanisms and awareness of risk management by regularly inspecting management effectiveness and by conducting training and promotions, thereby strengthening risk preventive actions which help to achieve our objective of strengthening our risk management culture.
We have established the "Personal Data and Information Security Management Committee" to supervise and review the planning of various management mechanisms, and set up a personal data management unit and an information security management unit, which are charged by the Personal Data Management Team and Information Security Division, respectively, who are responsible for the formulation and promotion of various personal data protection measures and information security.
Cathay Century Insurance attaches great importance to information security, which we consider to be the cornerstone of secure customer services. Starting in 2019, Cathay Century Insurance began purchasing information security insurance to mitigate compensatory risks that could arise from damage to customers or third parties caused by operational interruptions or accidents. In 2025, Cathay Century Insurance had 2 data breaches events, in which 100% of data breaches events was involved with personally identifiable information. 4 customers were affected by such violation.
