Press Room

Taipei, Taiwan, November 30, 2015 – Advanced Semiconductor Engineering, Inc. (TAIEX: 2311, NYSE: ASX), the world’s largest semiconductor assembly and test service provider, today announced that 6 of its production facilities in Nantze, Kaohsiung; K4, K7, K8, K10, K11 and K12, have received the ISO 15408-EAL6 certification, becoming the first outsourced semiconductor assembly and test (OSAT) services company to achieve this significant recognition. The ISO 15408-EAL6 certificate is an international standard for IT product security certification. The certification received by ASE was issued by the German Go vernment’s Federal Office for IT Security (Bundesamt für Sicherheit in der Informationstechnik, BSI) which is the central IT security service provider for the German federal go vernment. BSI also offers its services to private and commercial users of information technology.

ISO 15408-EAL6 is a framework that outlines the criteria for globally recognized standards and security inspections for IT products. It is designed for products and applications that are targeted for high security-intensive markets, such as the go vernment, banking or defense sectors. ‘Effective security is only possible when everyone involved is vigilant and trained to guard against any potential risks, which is why ASE invested time, financial and human resources into IT security, ’ said Dr Tien Wu, COO, ASE. ‘With the ISO 15408-EAL6 certification, customers at ASE can be safely assured that their intellectual property (IP) are well protected, their products and information data are handled with a high degree of sensitivity and are processed within the highest level of security at ASE’s facilities, ’ Dr Wu added. ISO 15408-EAL6 certification will greatly benefit customers and ASE as both parties would be able to shorten the time needed to verify product security and thus, enable customers’ products to reach their intended markets quickly.

As part of the certification effort, ASE invested NTD6.5 million to completely revamp its workplace security access systems. ASE engaged MiTAC Information Technology Corp and TLJ Intertech Inc to design and create secure access management programs, new proximity badges with smart chips for more than 25, 000 employees and visitors, and card readers in various parts of the ASE facilities in the Kaohsiung Nantze campus. These new measures will help identify, secure and provide a systematic level of traceability in the movement of people and go ods inside and around the ASE facilities. The secure access management system is already implemented at ASE Kaohsiung Nantze campus and is planned to be adopted in gradual stages by ASE’s global sites in parallel with ISO 15408 certification plans.

About ISO 15408-EAL6 and the Common Criteria

The Common Criteria for Information Technology Security Evaluation (CC) is an international standard (ISO/IEC 15408) for computer security certification. CC provides assurance that the process of specification, implementation and evaluation of a computer security product has been conducted in a rigo rous and standard and repeatable manner at a level that is commensurate with the target environment for use.

Evaluation Assurance Level (EAL) – the numerical rating describing the depth and rigo r of an evaluation. Each EAL corresponds to a package of security assurance requirements which covers the complete development of a product, with a given level of strictness. Common Criteria lists seven levels, with EAL 1 being the most basic (and therefore cheapest to implement and evaluate) and EAL 7 being the most stringent (and most expensive).