Information Security

In order to minimize information security risks (a key element of crisis management), we have set up an Information Risk Management Subcommittee with the aim of constantly maintaining risk-proof conditions, continually reviewing responses based on changing situations, and diffusing and integrating best practice throughout company operations. This subcommittee meets, in principle, twice a year, but on a further ad hoc basis if necessary. It is chaired by the Officer in-charge of Information Systems, and comprises representatives of every business unit’s planning department plus representatives from general administrative departments unattached to any particular business unit. It also coordinates with the Corporate Information Officer, Person in-charge of Corporate Information, and System Administrator assigned to every business site.
The most important matters discussed by this subcommittee are forwarded to the Sustainable Management Meeting and even the Board of Directors, who provide relevant feedback.
Furthermore, to deal with security incidents that could either heavily damage management and business operations or lose us the trust of our business partners and suppliers, such as cyberattacks and unauthorized access to confidential information, we have set up a Computer Security Incident Response Team (CSIRT) as our core policy unit under the leadership of the Information Risk Management Subcommittee Chair. Depending on the assumed extent of damage, the President may also step in to lead CSIRT. CSIRT works on limiting the spread of damage, and once containment activities are over, on restoration of operations and recurrence prevention measures.