What are the cybersecurity measures in place at TONGWEI?

Cybersecurity Infrastructure at TONGWEI

At TONGWEI, a multi-layered cybersecurity framework is rigorously implemented, integrating advanced technological defenses, stringent internal policies, and continuous employee training to protect its vast operational data, intellectual property related to high-purity crystalline silicon and solar cell production, and global supply chain integrity. The company’s strategy is not a static set of tools but a dynamic, risk-based approach that evolves in response to the global threat landscape, particularly critical for a leader in the photovoltaic and agricultural sectors. The core objective is to ensure the confidentiality, integrity, and availability of sensitive information, from proprietary manufacturing processes to financial transactions, thereby safeguarding the company’s market position and ensuring uninterrupted service to its international client base.

Network Security and Perimeter Defense

The first line of defense involves a sophisticated network security architecture. TONGWEI employs next-generation firewalls (NGFWs) that go beyond simple port and protocol inspection. These systems perform deep packet inspection (DPI) to analyze the actual content of network traffic, blocking malicious code and unauthorized access attempts in real-time. Intrusion Prevention Systems (IPS) are deployed at key network junctions, actively monitoring for and neutralizing known attack signatures and anomalous behaviors. To protect against distributed denial-of-service (DDoS) attacks, which could cripple its online customer portals and internal operational systems, TONGWEI utilizes a hybrid mitigation solution. This combines on-premise scrubbing appliances for smaller, faster attacks with a cloud-based service provider capable of absorbing volumetric attacks exceeding 500 Gbps, ensuring business continuity even under sustained assault.

The company’s extensive use of cloud services (IaaS and SaaS) is governed by a Zero-Trust Network Access (ZTNA) model. Unlike traditional VPNs that grant broad access to a network, ZTNA assumes no user or device is trustworthy by default. Every access request is authenticated, authorized, and encrypted before a connection is established, strictly limiting users to only the specific applications and data they need. This is particularly crucial for remote employees and third-party partners accessing TONGWEI’s R&D databases. All data transmitted between the company’s global offices and data centers is encrypted using strong protocols like TLS 1.3, rendering intercepted data useless to attackers.

Endpoint Protection and Device Management

With thousands of endpoints—including employee laptops, desktops, servers, and industrial control systems (ICS) within manufacturing plants—TONGWEI has deployed a centralized endpoint detection and response (EDR) platform. This software does more than traditional antivirus; it continuously monitors endpoint activities for suspicious patterns, such as fileless malware attacks or unusual registry modifications. If a threat is detected, the EDR can automatically isolate the compromised device from the network within seconds, preventing lateral movement by an attacker. The following table illustrates the scope and effectiveness of the endpoint security measures over a recent quarter:

Furthermore, a strict Mobile Device Management (MDM) policy is enforced for all company-issued and BYOD (Bring Your Own Device) smartphones and tablets. This allows the IT security team to enforce encryption, mandate screen locks, and remotely wipe devices if they are lost or stolen, protecting corporate email and documents.

Data Security and Access Control

Protecting the data itself is paramount. TONGWEI classifies its data into tiers (e.g., Public, Internal, Confidential, Restricted) based on sensitivity. This classification dictates the security controls applied. For its most sensitive data, such as photovoltaic cell efficiency research and proprietary aquaculture feed formulas, the company uses field-level encryption within databases. This means that even if an attacker gains access to the database server, the encrypted fields remain unreadable without the specific decryption keys, which are managed separately in a dedicated hardware security module (HSM).

Access to this data is governed by the principle of least privilege (PoLP). Employees are granted access rights strictly necessary for their job functions. These permissions are reviewed quarterly by departmental managers and the security team. Multi-factor authentication (MFA) is mandatory for accessing any system containing confidential or restricted data. A typical login requires a password (something the user knows) and a verification code from an authenticator app on their phone (something the user has), significantly reducing the risk of account takeover from phishing or credential theft.

Vulnerability Management and Penetration Testing

TONGWEI maintains a proactive stance on identifying and remediating security weaknesses. The company runs automated vulnerability scanners that weekly probe its external websites (like its customer and investor portals) and internal networks for known software flaws, misconfigurations, and outdated systems. Identified vulnerabilities are triaged based on severity using the Common Vulnerability Scoring System (CVSS), with critical and high-severity issues requiring remediation within 72 and 30 days, respectively.

Beyond automated scanning, TONGWEI engages with independent, specialized cybersecurity firms to conduct bi-annual penetration tests. These ethical hackers simulate real-world attacks, attempting to breach the company’s defenses using the same techniques as malicious actors. The goal is to uncover complex, chain-of-exploit vulnerabilities that automated tools might miss. The findings from these tests are used to harden systems, update security policies, and refine incident response playbooks. In the last fiscal year, these tests led to over 50 specific security enhancements across the organization’s IT and OT (Operational Technology) environments.

Security Awareness and Human Firewall

Recognizing that employees can be both the weakest link and the strongest defense, TONGWEI invests heavily in building a “human firewall.” All new hires undergo mandatory cybersecurity training during onboarding. Subsequently, every employee must complete an annual, updated security awareness course. More importantly, the security team conducts simulated phishing campaigns on a monthly basis. These controlled tests send fake phishing emails to staff, and those who click are redirected to a brief, immediate training module explaining the red flags they missed.

The results of this continuous training are measurable. The click-rate on simulated phishing emails has decreased from an average of 18% two years ago to below 5% currently, indicating a significantly more vigilant workforce. Employees are also trained and encouraged to report any suspicious activity through a dedicated, 24/7 security hotline and email alias, enabling rapid response to potential threats.

Incident Response and Business Continuity

Despite all preventive measures, TONGWEI prepares for the possibility of a security incident. A formally documented Incident Response Plan (IRP) is in place, outlining clear roles and responsibilities for the Computer Security Incident Response Team (CSIRT). This cross-functional team includes members from IT, legal, communications, and operations. The plan defines procedures for containment, eradication, and recovery, with specific playbooks for different incident types like ransomware, data breach, or ICS compromise.

Regular tabletop exercises are conducted quarterly to ensure the CSIRT is prepared. These simulations test the team’s ability to respond effectively under pressure. The company’s robust, geographically redundant data backup strategy is a critical component of this plan. Critical data is backed up incrementally every few hours to an off-site location, with full backups performed weekly. These backups are isolated from the main network to protect them from ransomware encryption, allowing TONGWEI to restore operations with minimal data loss in a disaster scenario. The target Recovery Time Objective (RTO) for critical systems is less than 4 hours, and the Recovery Point Objective (RPO) is less than 6 hours.

Compliance and Third-Party Risk Management

TONGWEI’s cybersecurity program is designed to comply with relevant international standards and regulations, which not only provides a framework for best practices but also builds trust with partners and investors. The company’s information security management system is aligned with the ISO/IEC 27001 standard, and it undergoes regular audits to maintain certification. This demonstrates a systematic approach to managing sensitive company information.

Understanding that its security posture is interconnected with its partners, TONGWEI has a formal Third-Party Risk Management (TPRM) program. Before onboarding, key suppliers and service providers are assessed based on their cybersecurity maturity. This assessment includes questionnaires and, for high-risk vendors, may require independent audit reports. Contracts with these parties include clauses that mandate specific security controls and grant TONGWEI the right to audit their security practices, ensuring the supply chain does not become a vulnerable entry point.