Our basic policy on information security
At the Kyuden Group, in order to continue the business operations of the entire Group, we realize that maintaining information security is of the utmost importance, and under a unified Group structure, we will strive to protect and maintain information security together with business partners.
1.Compliance with applicable laws and regulations
We pledge to observe laws and ordinances related to information security, as well as other social norms and related regulations stipulated in accordance with this Policy.
2. Construction of a framework
Under the guidance of the president of KYUDEN Holdings Inc. as the chief executive, the Group CISO (Chief Information Security Officer) oversees the information security measures for the Kyuden Group.
In addition, under the Group CISO, the Group CSIRT (Computer Security Incident Response Team) handles Group-wide responses during both normal operations and emergencies.
3. Countermeasures
We will secure the management resources necessary for properly managing information assets and promoting their effective usage. We will prevent information leaks caused by theft or loss, as well as deal with threats such as internal fraud or cyberattacks in an appropriate manner by taking organizational, physical, technical, and human countermeasures.
4.Periodic reviews and improvements
We will implement continuous risk management, while also conducting periodic reviews and making improvements as needed.
5.Responding to new threats
We pledge to quickly identify emerging threat trends and take swift action accordingly.
6.Education and training
In order to prevent information security-related incidents, we continue conducting education and training for our employees as well as drills that simulate information security-related incidents and the like.
7.Response to incidents
In the event of an incident related to information security, we will not only attempt to prevent damage from spreading further through a swift initial response, but we will also investigate the cause as well as implement countermeasures to prevent recurrence. We will also promptly disclose information related to such incidents.
