Board of Directors: The top governance unit in the risk management of the company, the responsibilities and roles are as follows:

1. Validate risk management policies, procedures, and frameworks.
2. Ensure alignment between operational strategies and risk management policies.
3. Ensure the establishment of appropriate risk management mechanisms and a risk management culture.
4. Oversee and ensure the effective operation of the overall risk management mechanisms.
5. Allocate and guide sufficient and appropriate resources for the effective functioning of risk management.

Audit Committee: Responsibilities and roles in supervising risk management operational mechanisms are as follows:

1. Review risk management policies, procedures, and frameworks, and regularly assess their applicability and effectiveness in execution.
2. Determine risk tolerance levels and guide resource allocation.
3. Ensure that the risk management mechanisms adequately address the risks faced by the company and integrate them into the daily operational processes.
4. Determine the priority order and risk levels for risk control.
5. Review the implementation of risk management, propose necessary improvement suggestions, and report annually to the Board of Directors.
6. Execute risk management decisions of the Board of Directors.

Risk Management Team: The CEO serves as the convener, with the highest executives from each department as risk management members. Their responsibilities and roles are as follows:

1. Formulate risk management policies, procedures, and frameworks.
2. Develop risk tolerance levels and establish qualitative and quantitative measurement standards.
3. Analyze and identify sources and categories of company risks, regularly reviewing their applicability.
4. Compile an annual report summarizing and submit it regarding the company's risk management execution.
5. Assist and oversee the implementation of risk management activities in various departments.
6. Coordinate inter-departmental interaction and communication for the operation of risk management.
7. Execute risk management decisions made by the Audit Committee.
8. Plan risk management-related training to enhance overall risk awareness and culture.

Operating Units: Responsibilities and roles are as follows:

1. Responsible for identifying, analyzing, assessing, and responding to risks within their respective units, establishing relevant crisis management mechanisms when necessary.
2. Regularly report risk management information to the Risk Management Team.
3. Ensure the effective implementation of risk management and related control procedures within their units to comply with risk management policies.

Audit Room: As an independent unit reporting to the Board of Directors, it formulates an annual audit plan based on this policy, procedures, and risk assessments. It reports to the Board of Directors regarding the execution status of risk management and audit results.