TSMC is committed to Information Security and Proprietary Information Protection for its customers, suppliers, and employees. To improve the information security level of the supply chain, TSMC collaborated with SEMI to establish the “Specification for Cybersecurity of Fab Equipment” and actively implemented four information security measures on information security regulations, information security evaluation and cooperation, promotion channels diversification, and risk management to strengthen supplier information security management. As of November, the information security assessments have been completed with 639 suppliers and a total of more than 7,000 cases of key security issues have been improved.。

Two-pronged Approach of Internal and External Evaluations to Upgrade Suppliers' Information Security

More smart manufacturing technologies have been introduced to meet the demands brought by the advancement of semiconductor process technology. To improve the resilience of suppliers' information security, TSMC's Corporate Information Security organization worked with its Material Supply Chain Management Division to establish an information security assessment team in 2021. TSMC created a supplier information security self-assessment questionnaire based on the "Supplier Information Security Assessment Standards," and suppliers can identify potential risks and security weaknesses through the examination in 12 different categories. In February 2022, TSMC further introduced a systematic third-party evaluation of supplier information security. Based on the evaluation results, TSMC assists suppliers in developing improvement plans and regularly tracks the execution status to review and improve information security measures through the dual evaluation mechanism. As of November 2022, 418 out of the 639 suppliers have obtained the A-level in the evaluation, and 277 have improved their information security levels by 1-2 within 6 months.

TSMC Collaborates with SEMI to Strengthen Information Security Resilience and Amplify Its Influence in the Industry

In addition to strengthening supplier information security protection measures, TSMC collaborated with SEMI to set up Semiconductor Cybersecurity Committee, with the goal of promoting “Zero Trust” information security solutions and improving supply chain resilience. SEMI Cybersecurity Committee is established to realize the vision of building supply chain resilience through cybersecurity and developed four strategies to focus on that include establishing and promoting semiconductor equipment information security standards (SEMI E187), increasing cybersecurity awareness, conducting supply chain cybersecurity questionnaire and assessment, and assessing supply chain information security weaknesses and risks. TSMC will continue to collaborate with SEMI to lead the industry with the goal of sharing valuable experiences and helping supply chain strengthen information security measures.