Information Security Policy

______________________________________________________________________________________________________________

Milliman, Inc. Aurora Services comply with information security requirements and provide most suitable services for information system development, maintenance and operation.

We aim to improve customer satisfaction through assured security management by applying appropriate rules.

We acknowledge that it is our social responsibility to appropriately protect client information we obtained through our business activities and the business information held by Aurora Services from every kinds of threats including theft and inappropriate use, and we try to manage it as one of the continuous managerial issues.

We comply with relevant laws, ordinances and regulations; and other requirements we agreed separately; and internal standards to do our business activities.

We aggressively promote educational trainings and awareness building activities to enhance self-awareness and willingness, in addition to trying to improve the expertise of Aurora Services.

We implement the information security management, improve it continuously and enhance its effectiveness.