basic policy on information security | konoike transport | konoike group-九州现金网
the company and its subsidiaries (hereinafter referred to as “the group”) actively utilize it and possess a large amount of information assets. meanwhile, information security incidents have become a social issue, and should such an incident occur in the group, it could cause a great deal of inconvenience to the parties concerned. accordingly, the group has established the “basic policy on information security” and the entire group will work to ensure security and safety in people’s lives and socioeconomic activities on an ongoing basis so that we can gain trust and confidence from the parties concerned.
1. achievement of information security objectives
maintenance of information security management system
the group will establish a division to promote information security, establish a system to promote information security systematically by clarifying roles and responsibilities, and maintain an optimal information security system by conducting management reviews on an ongoing basis.
continuous implementation of information security education
the group will provide education and training on an ongoing basis to raise employees’ awareness of information security.
strengthening of information security risk management
the group will clarify business and operational risks related to the information assets held, and conduct risk analysis, evaluation, and countermeasures.
strengthening of business continuity management
the group will take preventative measures against personal information leaks, cyber attacks, cloud service failures, and natural disaster risks (earthquakes, typhoons, tsunamis, power outages, pandemics, etc.), and will strive to minimize damage by promptly and appropriately responding to and reporting any information security incident.
compliance with laws, regulations and contracts
the group will comply with all information security-related laws, regulations and contracts that the group addresses.
2. information security review and continuous improvement
implementation of internal audits
the group will conduct internal information security audits on a regular basis, and make corrections and improvements as necessary.
initiatives for continuous improvement
the group will consider changes in society and technology, including the business environment, changes in management policies, and revisions to laws and regulations as issues for the group, and continuously review and improve information security.
representative director, chairman,
president and chief executive officer
effective date: august 1, 2021