Website and Cybersecurity Contingency Plan

I. Website Security Measures

1. Collaborate with a professional cybersecurity firm to implement robust security policies, thwart external malicious attacks, and ensure the website operates smoothly.

2. Genuine antivirus software has been installed on both the website’s servers and workstations, and a comprehensive set of measures is in place to guard against computer viruses and malicious emails, thereby preventing harmful information from disrupting or damaging the website system.

3. Ensure proper log retention.

4. Disable unused service functions and associated ports in the website system, promptly apply patches to remediate system vulnerabilities, and conduct regular virus scans and removal.

5. The server should be locked at all times, and the login password must be kept secure; a superuser username and password should be configured in the backend management interface.

II. Information Security and Confidentiality Management System
1. Information Monitoring and Control System:
(1) Website information must clearly indicate the source of the webpage; (i.e., all reprinted content must cite the original source URL).
(2) Relevant persons in charge shall conduct regular inspections of the website’s information content, implement effective monitoring, and ensure robust security oversight.
2. Implement a responsibility system for website management.
Clearly define the responsibilities of website administrators and leaders at all levels for managing website operations, and implement a strict management system in which whoever is responsible for management is also accountable.

1. Cybersecurity Officer:

Responsible for the overall operation and security of the website, and for liaising with partner cybersecurity firms.

2. Network Administrator:

Prior to publishing or modifying any information, approval must be obtained from the cybersecurity officer; the officer is also responsible for the operation and maintenance of the website. In the event of a cyberattack or the appearance of illegal content on the website, the cybersecurity officer shall be notified immediately.

3. Website Customer Service:

Responsible for handling user messages, reviewing inquiries, and providing customer service and reception.

III. Internal Confidentiality Management System for Information Security

1 1. Relevant internal personnel shall not disclose confidential information to external parties;  

2 1. Internal personnel shall not publish or disseminate content prohibited by national laws;  

3 1. Information must be reviewed by relevant personnel before publication;  

4 1. Assign website management permissions to relevant administrators; unauthorized management of website information is prohibited.

5 1. In the event of an information security incident involving the website, the relevant parties shall be notified immediately, and timely coordination and resolution shall be undertaken.  

6 • Filter toxic and harmful information and implement confidentiality settings for user information.

IV. Information Security Management System for Logged-In Users  

1 1. Access permissions for reading and posting user information shall be configured as needed; unauthorized access to the system or alteration of others’ information is strictly prohibited.  

2 , filter harmful information, effectively manage user data, and ensure the security of such information. All;  

3 , Establish a responsibility system and workflow for information editing, review, and publication; all information must be reviewed by the relevant authorities prior to release. Personnel review;  

4 • Effectively monitor user behavior on the website to ensure internal information security;

5 1. Registered users shall not disseminate or publish any content prohibited by national laws.  

6 1. In the event of an information security incident, promptly implement effective countermeasures and maintain records, reporting as required by regulations. Report to the relevant authorities.

V. Daily Website Monitoring

1. The website hosting service provides automatic backup functionality, ensuring timely data backups in the event of issues to prevent data loss.

2. Monitor network conditions in real time, and promptly resolve any issues independently or contact the relevant equipment maintenance provider for resolution.

VI. Description of Risks and Hazards and Emergency Response Measures

1. Description of Cybersecurity Risks: Website stability is of paramount importance, and any website is susceptible to hacking, information tampering, data loss, network outages, and other security threats.

2. Website emergency response measures: In the event of a website being attacked, infected with malware, or becoming inaccessible, report the issue immediately. Cybersecurity officer and Contact the web hosting provider to resolve this issue, investigate the root cause of the website problems, and ensure the site is restored to full functionality as soon as possible.