2.3 Authorization of information system:2.3.1 Access to information assets should be based on the scope of its own business, it’s forbidden to access information assets that out of their own business without authorization.2.3.2 Personnel must be formally authorized, and their account must be unique. It is forbidden to borrow someone else's account or share an account.2.3.3 Personnel with the highest authority in system management should be evaluated with prudent authorization.2.4 Account and authority applicationIf applicant want to apply for the new authority for information system or service, they should fill out the「I-F002 Application of authority of information system」and select the type of application and note related details before submit to supervisor.2.5 AuditThe user fills in the application form, which is reviewed by the supervisor of the direct unit according to the business needs. After being approved by the IT director, it can be processed by the IT staff.2.6 Set system permissionsThe setting of access rights is based on the minimum rights and information required by employees.2.7 Record keep「I-F002 Application of authority of information system」Record keep for one year.2.8 Work authorization of IT staff:The Laboratory Manager should authorize IT staff to work on the following items.2.8.1 Serve as the consulting window of the company's information department to assist in solving problems related to the information operation of each unit.2.8.2 Assess computer and system requirements for users, management, suppliers and technicians.2.8.3 Supervise engineering personnel to install appropriate systems, software, etc. for company employees and update and maintain according to company personnel needs.2.8.4 Propose equipment purchase items to be purchased after approval by the supervisor.2.8.5 Plan the work flow of the project, such as computer repair, equipment upgrade, software purchase, etc.2.8.6 Responsible for security system management and network management of antivirus software.2.8.7 Responsible for IMS system management authority management.