Information Security Statement – Furthering Risk Management and Competitiveness

Achieving the stringent ISO/IEC 27001:2013 certification not only ensures compliance with applicable regulations but also significantly strengthens customer trust and loyalty in Yang Ming’s services. This reinforced confidence in our IT framework supports Yang Ming’s ongoing growth as a leading carrier for decades to come. In addition, Yang Ming successfully achieved ISO/IEC 27001:2022 recertification in 2025.

At Yang Ming, we leverage information technology to support our global daily operations and strengthen our group competitiveness for a better future. Protecting our critical data and services from all potential threats—including unauthorized access, theft, or damage—is our top priority. Our commitment to information security is guided by the following core values:

• Quality ：Ensure the accuracy and integrity of all business information, while enhancing administrative efficiency and information quality.
• User-friendly ：Ensure that all business IT systems at Yang Ming are user-friendly and enable smooth access to operational information.
• Privacy ：Ensure the confidentiality of Yang Ming’s business information and safeguard trade secrets and stakeholder privacy.
• Security ：Comply with all applicable national laws and security standards, thereby ensuring the continuity and stability of business operations.

Certifications