Welcome to Apex ! We would like to ensure that you have a safe and pleasant stay on our website. Please accept Cookies for optimal performance, or READ MORE to learn how we use them.
By continuing to use this Website. You agree to our Privacy Policy and our use of Cookies.We commit to protect your privacy with the highest level of security. To understand how we process your personal data, please read this Privacy Policy carefully.
Necessary Cookies help make a website or application usable by enabling basic functions such as page navigation and access to secure areas of the website. These Cookies are essential and cannot be switched off.
These Cookies collect information about how visitors use a website or application, for instance which pages visitors go to most often, and if they receive error messages from web pages or applications.
These Cookies allow the website or application to remember choices you make (such as your username, language or the region you are in) and provide enhanced, more personal features. These Cookies can also be used to remember changes you have made to parts of web pages or applications that you can customize.
These Cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help to measure the effectiveness of the advertising campaigns.
To strengthen corporate governance and establish sound risk management practices, the Board of Directors approved the Company's Risk Management Policy on December 16, 2020. The policy guides all business units to effectively identify, measure, monitor and control the various risks arising from their operations, and to keep those risks within an acceptable level, so as to achieve a reasonable balance between risk and return and support the Company's sustainable operation.
Risks involved in the Company's businesses include operational risk, market risk, financial risk, climate change and environmental risk, occupational safety risk, information security risk, and compliance risk.
The Company began promoting its risk management mechanism in 2020 and has reported its operation to the Board of Directors once a year since that year. In 2025, the Company held a risk management meeting to identify the risks it faces, assess those risks and determine response measures, and on December 19, 2025 reported to the Sustainability and Nomination Committee and the Board of Directors on the implementation of the Company's risk management — including risk identification, assessment of risk impacts (covering sustainability issues and climate risk), and the operation of the risk management strategies adopted. Under the responsibilities approved by the Board, the Sustainability and Nomination Committee is responsible for promoting and supervising the implementation of enterprise risk management, and for submitting any necessary improvement recommendations arising from its review to the Board for further examination. The effectiveness of controls over operational-level risks is audited by the Internal Audit Office in accordance with the annual audit plan.
In accordance with the GRI 2021 Standards and the AA1000 Stakeholder Engagement Standard (AA1000 SES), the Company evaluated dependency, responsibility, level of concern, influence and diversity of perspectives, and identified six categories of stakeholders highly relevant to its operations. In 2025, topics of concern were collected through day-to-day communication and questionnaire surveys, with 88 valid responses received, comprising 17 suppliers, 52 employees, 11 customers, 5 representatives of financial institutions, 2 investors and 1 other respondent.
Senior management scored the significance of the impact of 40 topics on the Company's operating activities, using risk likelihood and risk impact as assessment indicators, and ranked them by the product of the two to identify material topics. A total of 13 material topics were confirmed for 2025, corresponding to 7 GRI Topic Standards and 7 self-defined topics.
| Materiality Level | Classification Basis (Likelihood × Impact) | Number of Topics |
|---|---|---|
| A Highest materiality | Product of 5.5 or above | 7 |
| B High materiality | Product of 4.5 or above but below 5.5 | 6 |
| C Moderate materiality | Product of 4.0 or above but below 4.5 | 11 |
| D Low materiality | Product below 4.0 | 16 |
| Rank | 2025 Material Topics | 2024 Material Topics |
|---|---|---|
| 1 | Customer relationship management | Product quality management |
| 2 | Product responsibility management | Customer relationship management |
| 3 | Research and innovation | Research development and innovation |
| 4 | Board governance and corporate governance effectiveness | Effectiveness of Board and corporate governance |
| 5 | Risks from external political and economic environment changes | Change of political and social environment |
| 6 | Supply chain disruptions and climate risk-induced cost variations | Supply chain disruption and cost fluctuation |
| 7 | Financial risk management | Capital management |
| 8 | Energy management | Credit management |
| 9 | Reputation risk | Energy management |
| 10 | Market and demand fluctuation risks | Rising price of GHG emission |
| 11 | Water resource risks (water quality, quantity, and sources) | Fail of digital transformation |
| 12 | Carbon pricing and rising carbon cost risks | Harmed reputation |
| 13 | Information security management | Uncertainty of market information |
| 14 | — | Investment in new technologies |
| 15 | — | Sustainability risk |
| 16 | — | Groundwater depletion |
| Cycle | Focus | Key Elements |
|---|---|---|
| Plan | Information Security Risk Management | Corporate information security; compliance with the international information security standard (ISO/IEC 27001); training employees to obtain professional competency certification |
| Do | Multi-Layer Security Protection | Network security; email gateway security; application security; data surveillance and maintenance; personnel and physical security; data security enhancement |
| Check | Monitoring of Information Security Management | Continuous information security control; information security attack simulation exercises; quantitative assessment of information security |
| Action | Review and Continuous Improvement | Review of information security measures for improvement; information security education, training and publicity |
| Program | Measures |
|---|---|
| (1) Network Security | Deploy advanced technologies for computer scanning and system and software updates. Strengthen network firewalls and network controls to prevent viruses from spreading across machines and zones. |
| (2) Equipment Security | Establish an incoming-equipment virus scanning mechanism to prevent machines containing malware from entering the Group. Deploy endpoint anti-virus measures by computer type and strengthen malware behavior detection. |
| (3) Application Security | Establish application security checklists, evaluation criteria and improvement targets for the development process. Continuously strengthen application security controls and integrate them into the development process and platform. |
| (4) Enhanced Data Security Protection | Develop advanced information protection tools that use data labeling to strengthen document confidentiality classification and data protection. Apply encryption controls and effective tracking to documents and data. Control outbound email. |
| (5) Education and Training | Raise employee awareness of email social engineering attacks and conduct phishing defense detection. Hold regular information security drills to strengthen employee security awareness. |
| (6) Cybersecurity Maturity Assessment | Engage external experts, including information security audit organizations and cyber risk assessment agencies, to periodically assess the Group's network and information security. Integrate objective third-party verification results with threat intelligence to conduct risk analysis and strengthen the information security management system. |
| Management Target | 2025 Achievement |
|---|---|
| Maintain ISO 27001 certification status | Certified to ISO/IEC 27001:2022 (valid 2023.08.27–2026.08.26) |
| 100% information security protection coverage | 100% |
| 100% completion rate for information security training and NDA signing | 100% |
| Incidents of customer privacy infringement or loss of customer data | None occurred in 2025 |
| Item | 2022 | 2023 | 2024 | 2025 |
|---|---|---|---|---|
| Completion rate of new employee information security training and NDA signing | 100% | 100% | 100% | 100% |
| Information security communication messages and media materials (items) | 29 | 33 | 60 | 51 |
| Employees with access to online information security materials (persons) | 7,264 | 7,562 | 8,378 | 7,749 |
| Item | 2022 | 2023 | 2024 | 2025 |
|---|---|---|---|---|
| Networked computers and devices equipped with security tools | 100% | 100% | 100% | 100% |
| System threats automatically blocked (times) | 50,629 | 85,072 | 199,800 | 214,365 |
| Harmful emails automatically blocked (messages) | 6.0 M | 7.2 M | 5.8 M | 4.7 M |
| ISMS objective monitoring achievement rate | — | 100% | 100% | 100% |
| Information security incidents detected (times) | — | 90 | 149 | 103 |
| Malicious code detected, quarantined or deleted by anti-virus software (times) | — | — | 136,000 | 120,000 |
Contact Us
service@apex-intl.com.tw
Copyright © Apex International Co., Ltd. All rights reserved. Designed by rIDEA
