AUO regards suppliers as important partners. Through tight co-operation, we strive for win-win situation and encourage mutual beneficial development and sustainability.
Supply Chain Cybersecurity Guidelines
- Comply with AUO's supplier cybersecurity policies, standards, and procedures.
- AUO advise that appropriate cybersecurity management measures should be taken, or ISO 27001/TISAX standard should be used for cybersecurity management.
- Protect confidential information and personal data of AUO and its customers, and prevent unauthorized third-party use.
- Delivered software products must have compliant licenses.
- Ensure that the provided products are free from all vulnerabilities that have already been publicly disclosed before the delivery date.
- If a product or subcontractor's product has vulnerabilities, immediate notification must be given, and a repair plan provided.
- Delivered products consist of no computer viruses, malware, trojan horses, worms, time bombs, or spyware.
- If suppliers experience a cybersecurity incident that may affect AUO's production or operations, the AUO contact window (purchasing personnel in this case) should notify AUO