EPSON — 2. EPSON’s Security Basic Policy

2. EPSON’s Security Basic Policy At Epson, we take the following approach regarding security so our customers can use our products safely and with ease. 1. We treat our products’ security as the basis of our products’ quality. In our manufacturing processes, we consider security throughout the life cycle of the product, from design until the customer is finished using it. 2. We actively provide information and knowledge about security for our customers. 3. We ceaselessly work to create countermeasures against vulnerabilities. • Our efforts are focused on implementing vulnerability tests using the industry’s standard tools and make efforts to deliver products without vulnerabilities.

• We regularly monitor information about vulnerabilities from open source software used in the firmware in our products. • When new vulnerabilities are found, we promptly analyze them and provide information and countermeasures. 4. We apply security standards. ISO/IEC 15408, IEEE Std. 2600.2 TM ISO/IEC 15408 is an international standard for the independent and objective evaluation of security measures in IT products and systems. The certification means the security functions confirmed by an independent evaluation as compliance with IEEE Std. 2600.2 TM profile for all-in-one printers. - 5 -