Scientific Governance

Improve the governance system, implement an efficient and robust governance structure
and implement scientific decision-making and compliant operations
to create sustainable competitiveness embedded in the global value chain.

Information Security

Huaqin Technology has always regarded safeguarding customers'information security as the foundation of its development. It has obtained the authoritative ISO/IEC 27001 certification and built an all-round security management system covering multiple dimensions including data, information, network and physical security, fully ensuring the security of customers, employees and stakeholders as well as stable business operation.

Comprehensive information security control

Customer Confidentiality Area

The information security during the customer service process is of paramount importance to the group's information security efforts. The group has established multiple customer-exclusive confidentiality work areas, safeguarding the confidentiality, integrity, and availability of customer information through multi-dimensional measures such as environmental security, network security, personnel security, physical security, and data security. The group regularly conducts information security audits in the confidentiality areas, providing a strong security backstop for customer service.

Supply Chain Information Security Management

Before any supplier collaborates with Huaqin, they are required to sign a confidentiality agreement. The company imposes strict restrictions on all physical and logical access for suppliers, and organizes annual information security audits and evaluations for key suppliers. All suppliers entering the company must have valid identification and pass through an approval and registration process to prevent unauthorized access.

Employees' Information Security Empowerment and Certification

Huaqin organizes annual information security training and capability certification for its employees. Through activities such as planning an Information Security Month, it enhances the awareness of all personnel, ensuring a comprehensive understanding of information security protection concepts, management systems, protective measures, and practices. For employees working in confidentiality areas, the group arranges additional advanced security capability training and certification to ensure that key personnel have a solid grasp of the security awareness and capabilities that match the confidentiality areas in which they work.

Mechanism and organizational guarantee

Authoritative Certification and Legal Compliance

ISO/IEC 27001 is internationally recognized as the most authoritative, stringent, and widely accepted standard for information security management. Huaqin, in compliance with the ISO/IEC 27001 information security management standards and procedures, has met the requirements for corporate information security management that are aligned with international standards, fulfilling its commitment to users. Huaqin strictly adheres to the "Cybersecurity Law of the People's Republic of China" and the "Personal Information Protection Law," ensuring that our designed and developed products fully comply with the current information security laws and regulations.

Organizational Guarantee

Authorized by the Board of Directors, the Risk Control Committee defines the Group’s security organizational structure, formulates security strategies and guides the overall work direction, achieving all-round management covering information, network, data and physical security. The Risk Control Committee authorizes the Group Security Committee to assume overall security management responsibilities, which coordinates work across all specialized security fields and forms the unified second line of defense for Group security. It also guides the first line of defense in implementing the Group’s security management requirements.

security culture

In the organization, we regularly carry out various forms of publicity activities such as interpreting security rules, analyzing violations, reminding of necessary knowledge, and conducting information security drills. This instills the awareness that "information security starts from the heart and the practice of safe information is in action" into the hearts of every employee and partner.

Join Us

Sustainability

Contact Us