Responsibility Sharing2025天鈺科技報告書en-v1.3(CH2).pdf

Under the premise of legal compliance and ethical corporate management, we will continue to strengthen the assessment and response of operational risks and opportunities; optimize external communication channels; establish a convenient, quick, accurate, and secure information network; and implement effective stakeholder communication and engagement to develop the core literacy and attitude required for sustainable development.

Goals

Achieved

On-going

Issue	Goals and Targets	2025 Target
Governmance Mechanism	Corporate Governance Evaluation ranking within top 5% Selected for 1 corporate governance-related index Board meeting attendance rate > 90% Independent directors account for 1/2 of boar d seats; female directors account for 1/3 No significant defects in internal control project review	Corporate Governance Evaluation Ranking within top 20%
		Board meeting attendance > 90%
		Independent directors account for 1/2 of the board seats; female directors account for 1/3
		No significant defficiencies in internal control audits
Complaince and Ethics	No significant violation cases occur 100% completion rate of annual compulsory courses on ethics an d legal compliance	No significant violation cases occur
Complaince and Ethics		100% completion rate for mandatory annual courses on business ehics and regulatory compliance
Disclosure and Investment	Continuously optimize external communication channels, maintain good relationships with global c apital markets, and enhance investor confidence Seek suitable inv estment targets that support product business expansion based on industry trends and market conditions, creating investment value with a stable financial structure Corporate Governance Evaluation ranked top 5% Participate in Domestic and International Sustainability Evaluations	Quarterly financial reports released within 30 days of accounting quarter closure, English version within 60 days
		Annual financial reports released within 60 days of accounting quarter closure, English version within 90 days
		Annual earnings conference completed by mid-February of the following year
		Participate in at least one domestic sustainability evaluation to identify ESG maturity
Risk Management	Implement enterprise risk management (ERM) from 2027 onward Introduce business continuity planning (BCP) from 2029 onward Conduct in-depth nature-related risk identification and align with TNFD framework (2030)	Conduct in-depth climate risk identification and align with TCFD framework
Information security	100% ISO 27001 coverage 100% coverage and completion rate for employee information security education, promotion, and training 0 major inf ormation security incidents	Maintain ISO 27001 effectiveness
		Subsidiary JADARD to obtain ISO 27001 certification
		100% completion rate for information security education and training
		Zero major information security incidents

Governance Evaluation and Financial Performance

With continuous enhancements in corporate governance, Fitipower's Board composition demonstrates strong diversity and independence, with female directors accounting for 43% and independent directors reaching 71% in 2025. These efforts are also reflected in the Company's governance performance, as Fitipower has steadily improved its ranking and was recognized in the top 6%–20% in the 11th Corporate Governance Evaluation. In terms of financial performance, Fitipower provided nearly three billion product units and services, including 690 million display driver ICs, 1.12 billion power management ICs, and 490 million other ICs. Consolidated revenue for the year was NT$17.993 billion, and earnings per share reached NT$9.65.

Governance Framework

Regulatory Compliance and Professional Ethics

Fitipower has established comprehensive internal regulations to strengthen corporate business conduct, ethics, and compliance culture. In addition to timely updates of internal policies by respective departments, mandatory training for employees is also implemented. To ensure compliance, the Audit Office conducts regular checks in line with relevant regulations and has set up a whistleblower hotline (wb@fitipower.com) to encourage the reporting of unethical behavior. Whistleblowers may receive rewards of up to NT$10,000, depending on the severity of the case, and are assured protection against any form of retaliation.

2025 Implementation Summary: Fitipower Grooup's employees received a total of 2,187 hours of training related to ethical business conduct. There were no reports of violations related to ethical business practices, nor were there any findings of regulatory breaches (including those related to environment, health and safety, labor, marketing and product labeling, or unfair competition).

Risk Management

To ensure the sustainable operation of Fitipower, we carefully assess, identify, measure, monitor, and control various risks, keeping them within acceptable levels. We have established the Fitipower Risk Management Policy and Procedures as the guiding principles for risk management across all departments.

Each management unit is required to regularly evaluate and review risk issues. The General Manager, using extensive operational experience and professional judgment, consolidates these into major risk items and regularly reports to the Board of Directors on risk prevention, control, and early warning measures within the management process.

Information Security

To ensure the effective implementation of information management and to address potential risks, Fitipower adheres to the PDCA management cycle and has established a comprehensive information security risk assessment and management system (ISO 27001), a Security Operations Center (SOC), and an Information Security Committee that regularly reports to the Board of Directors on operations and action plans. In 2024, the Company introduced Trend Micro's MDR (Managed Detection and Response) service, enabling 24/7 security monitoring and real-time threat response by external experts, which significantly strengthened overall cybersecurity protection, enhanced incident response efficiency, and improved system resilience. No complaints were received regarding violations of customer privacy, data breaches, leaks, or losses. In addition, one phishing drill was conducted in 2024, followed by retraining and testing for employees with insufficient security awareness, with all participants subsequently passing the post-test requirements, ensuring the effective implementation of the Company's information security policies. (learn more about our policies).