GOVERNANCE — 董事會 · 政策 · 資安治理

Governance,
built to last.

An IPO-ready governance framework — board and functional committees, corporate policies, and internationally certified information-security and privacy governance.

01 — BOARD & COMMITTEES

Board & functional committees

The board steers group strategy and risk oversight, with an InfoSec & Sustainability Committee beneath it. The statutory committees follow the public-offering timetable.

BOARD OF DIRECTORS

Board of Directors

Oversees group strategy, risk and major decisions.

INFOSEC & ESG COMMITTEE

InfoSec & Sustainability Committee

Strengthens material issues in information-security and personal-data management, and aligns corporate development with ESG, publishing an annual sustainability report.

AHEAD OF PUBLIC OFFERING

Governance ahead of public offering

The group is not yet a public company, so the audit and remuneration committees required by the Securities and Exchange Act have not been constituted. They will be established on application for public offering, and their composition and remit disclosed here.

Securities and Exchange Act, Articles 14-4 and 14-6
02 — POLICIES & STATEMENTS

Corporate policies & statements

Group-wide conduct and quality standards; the document library is compliance-managed with versioning and effective dates.

ANTI-CORRUPTION & WHISTLEBLOWER

An independent reporting channel for anti-corruption, gender-equality and anti-harassment matters, protecting whistleblowers.

fair@media-wind.com.tw →
03 — INFORMATION SECURITY

InfoSec & privacy

Handling clinical and patient-related data, we manage quality, security and privacy to international standards — SGS-audited.

ISO 9001: 2015

Quality management — certified scope: consulting for and management of patient assistance and support services.

Certificate TW18/00074.01
Valid 2024-01-26 → 2027-01-26
View certificate JPG
ISO 27001: 2022

Information security management — certified scope: PAP/PSP programme leads, development and operation of the Digital Solution System with its data-centre and network management, and PAP/PSP data protection (Statement of Applicability v7.0).

Certificate TW21/00067.01
Valid 2024-04-15 → 2027-04-15
View certificate WEBP
ISO 27701: 2019

Privacy information management — certified scope: acting as a PII processor, delivering assistance, support and consultation for patient assistance and support programmes through the Digital Solution System.

Certificate TW24/00000365.01
Valid 2024-04-15 → 2027-04-15
View certificate WEBP

Certified entities: Media-WIND Health Strategies Co., Ltd. (PatientsForce) and MediCloud Biotech · Certification body: SGS

Governance 公司治理 | Media-WIND Health Holdings