Chapter 1. General Provisions

Article 1 (Purpose) The purpose of these Regulations is to stipulate matters necessary for managing and protecting undisclosed technical or managerial information, business information, design drawings, computer software, other intellectual property rights, trade secrets, and confidential information (hereinafter collectively referred to as the “Confidential Information, etc.”) of SEUNG JIN IND Co., Ltd. (hereinafter referred to as the “Company”). Article 2 (Scope of Application) These Regulations shall apply to all officers and employees of the Company, as well as external contractors, partners, and any other persons having access to the Company, in connection with the handling of “Confidential Information, etc.” Article 3 (Definitions) The terms used in these Regulations shall be defined as follows: 1. The term “Trade Secret” refers to any technical or managerial information useful for business activities, such as production methods, sales methods, contract information, sales records, customer information, employee compensation data, server account information, and other related information, which is not publicly known, has independent economic value, and is maintained as confidential through reasonable efforts 2. The term “Confidential Information” refers to any technical or managerial information not disclosed to the public, which is valuable enough to warrant protection against external disclosure in relation to the Company’s management or operations, including any information directly held by the Company or obtained through business relationships with third parties. 3. The term “Intellectual Property Rights” refers to rights relating to intangible assets that may realize economic value, including knowledge, information, and technology created or discovered through human creative activities or experiences; expressions of ideas or emotions; business identifiers or product marks; biological varieties or genetic resources; and all other rights arising from intellectual activities in the fields of research and development, science, literature, and art. This includes, without limitation, rights relating to inventions, scientific discoveries, developments, designs, trademarks, trade names, performances, sound recordings and broadcasts, literary works, drawings, and computer programs. 4. The term “Information System” refers to all assets necessary for managing the “Confidential Information, etc.,” including computers, IT systems, networks, software, and various audiovisual facilities owned by the Company. 5. The term “Information Assets” refers to a concept that encompasses both “Confidential Information, etc.” and “Information Systems.”

Chapter 2. Classification of Security Duties

Article 4 (Classification of Security Tasks 1. All “Confidential Information, etc.” of the Company shall be classified into “General Tasks,” which relate to the general utilization of such information, and “Security Tasks,” which concern its protection and management. “Security Tasks” shall be further classified into “General Security Tasks” and “System Security Tasks.” 2. The term “System Security Tasks” refers to security-related work concerning information systems that are mainly operated through computers, communication networks, and similar systems. The term “General Security Tasks” refers to all other information security-related work outside of the scope of “System Security Tasks.”

Chapter 3. Security Organization and Functions

Article 5 (Organization and Functions of Security Tasks) 1. The Company’s protection and management of “Confidential Information, etc.”, including all security management tasks such as “General Security Tasks” and “System Security Tasks,” shall be the responsibility of the head of each relevant department. 2. Each department head shall establish and coordinate all regulations and guidelines related to the security of “Confidential Information, etc.,” respond to and report initial incidents of security breaches, conduct security training, and perform other duties related to information security 3. Each department head shall establish a collaborative workflow among departments and share key internal security information.

Chapter 4. Asset Management

Article 6 (Information Classification and Classification Criteria) 1. The Company’s “Confidential Information, etc.” shall be classified into two levels based on importance: “Top Secret” and “Confidential.” 2. “Top Secret” refers to “Confidential Information, etc.” that, if disclosed to competitors or externally, could cause significant damage to the Company. Such information includes, but is not limited to: - Information with potential for technological leakage related to the securing of intellectual property rights; - Information related to the development of world-class technology or products; - Information on technologies currently being domestically developed due to foreign technology transfer restrictions, or technologies recognized as having high future technical, economic value or growth potential, requiring protection; - Any other information deemed by the Company to constitute core business secrets. 3. “Confidential” refers to “Confidential Information, etc.” that could cause harm to the Company if disclosed externally, but does not fall under the category of “Top Secret.” Article 7 (Handling and Management of Information) 1. All documents and materials containing “Confidential Information, etc.” shall be maintained separately from general documents and subject to special security measures for strict management. 2. Each department head shall have the duty and responsibility to manage all “Confidential Information, etc.” within their department. 3. User access rights to “Confidential Information, etc.” shall be assigned and managed according to the nature and importance of the information. 4. User access rights to “Confidential Information, etc.” may be modified or revoked upon changes in employment, contract termination, role adjustment, or other relevant circumstances.

Chapter 5. Personnel Management

Article 8 (Execution of Confidentiality (Security) Agreements) 1. All officers and employees shall execute a confidentiality agreement, which includes provisions on the protection of “Confidential Information, etc.,” upon joining the Company, during employment, and upon termination of employment. 2. When providing “Confidential Information, etc.” to any domestic or foreign companies or individuals maintaining a cooperative relationship with the Company, a non-disclosure agreement shall be executed each time a related contract is concluded. 3. For other contractors or personnel engaged in tasks requiring special management, a separate confidentiality agreement including information security obligations shall be obtained. Article 9 (Non-Compete Agreement for Departing Employees) 1. The Company may enter into a non-compete agreement with employees who are leaving the Company to restrict employment with competing companies. 2. When entering into a non-compete agreement with a departing employee, the Company shall comprehensively consider the importance of trade secrets or confidential information handled by the employee, as well as any special benefits or compensation provided to the employee, and shall specify details such as the duration of the non-compete period in the agreement. Article 10 (Conduct of Security Training) 1. All officers and employees shall receive regular in-house security training, which may be substituted with online training. 2. Security training shall be conducted at least once a year for all officers and employees.

Chapter 6. System Security Management

Article 11 (Computer Usage) 1. All computer users within the Company shall not use illegal software, and any liability arising from the use of illegal software shall rest with the user. 2. All computer users within the Company shall set and manage login passwords to restrict access by third parties to the computers 3. All computer users within the Company shall install software and security solutions provided by the Company to prevent virus intrusion and hacking, and shall perform regular backups and updates Article 12 (Access Control Systems and Security Camera (CCTV) Installation) 1. The Company shall install access control systems and unmanned security systems for individuals entering the Company premises or designated security management areas, and shall record and manage access logs of such individuals. 2. The Company shall install Security Camera (CCTV) in key management areas and implement corresponding Security Camera (CCTV) management measures.

Chapter 7. Other Security Management

Article 13 (Conduct of Security Inspections) 1. The Company shall conduct security inspections at least once a year, organized and carried out internally by each department head. 2. If any serious issues are identified during the security inspections, each department head shall report the inspection results to their superior and ensure that corrective actions are implemented. Article 14 (Actions against Violators of the Regulations) Employees who violate these Regulations, as well as supervisors or related personnel who fail to perform proper oversight due to negligence or carelessness, may be subject to disciplinary action in accordance with applicable laws and other company regulations.

Supplementary Provisions

Article 1 (Effective Date) These Regulations shall take effect immediately from the date of enactment.