Information Security
Information security
We are working to strengthen security and protect company information and client/customer information from threats such as information leaks and cyberattacks.
Based on the premise that incidents and accidents are unavoidable, we are working to build an information management system and improve its operation.
Establishment of information security policy
We are working on the following education and awareness activities, and will continue to do so in the future. We have been making efforts to ensure that activities appropriate for the workplace can be implemented continuously through the appointment of managers.
- Training by job grade at the time of joining the company or at the time of promotion
- Security training for managers
- Training on responding to suspicious emails for all employees
- Awareness-raising activities through Confidentiality Management Reinforcement Month and the internal bulletin board
- Activities to raise the level of security incident countermeasures by suppliers
Information security policy
- We recognize security-related matters as an important management issue and, after establishing an appropriate management system, we will promote ongoing initiatives.
- We evaluate and analyze risks in security-related matters and implement appropriate measures from human, organizational, technical, and physical standpoints.
- We will continue to provide education and raise awareness about security-related matters to improve understanding and response capabilities.
- In the event of a security-related incident, we will respond promptly and appropriately, and work to prevent recurrence and the spread of damage.
- We regularly review the management system, operational status, and effectiveness of various measures in security-related matters, and make improvements on a continuous basis.
Establishment of vulnerability monitoring and incident response guidelines
As one of our corporate social responsibilities, we will thoroughly implement information security measures and protect our information assets. We will strengthen governance by assuming risks, formulating rules, and building systems for their management and operation. By doing so, we strive to ensure that the use of information does not impair the rights and interests of the information providers.
