4.1. To continuously improve information security, the Company shall conduct regular training sessions and provide information on maintaining information security to employees, staff, and contracted service providers.