The information security management policy is related to the company's information security management system (hereinafter referred to as ISMS). Management methods and reference basis for operating procedures. At the same time follow the International Standards Organization (ISO) The established continuous improvement of the P.D.C.A. cycle process management model, integration and enhancement of information security Management system, establish an institutionalized, documented and systematic management mechanism, continuously monitor and review management performance, in order to implement the concept of data communication safety management and business continuity and achieve goals.