Information Security
Shinwa recognizes that the protection of important confidential information in management activities, business promotion, and organizational management is an inherent need of society and a social responsibility necessary to gain the trust of our customers and other stakeholders.
In order to maintain and improve information security, we are working to strengthen the protection and management systems for the information assets that we own in accordance with our Basic Policy.
We have positioned all information and information systems owned by the Group (hereinafter, “information assets”) as important assets in corporate activities, and have established an Information Security Basic Policy in order to properly protect and manage information assets. We also declared that our officers, employees, and members (hereinafter, “employees, etc.”) will adhere to this policy when engaging in business.
Information Security Promotion System
We appoint an information security manager and organize an Information Security Committee.
-
Protection and management of information assets
In order to ensure the confidentiality, integrity, and availability of information, the Information Security Committee formulates an Information Security Policy based on the categorization/evaluation of information assets and clarification of risks such as leakage.
-
Information Security Policy and legal compliance
Employees, etc., of the Shinwa Group comply with the Information Security Policy and laws/regulations regarding information security.
-
Information security education
The Information Security Committee periodically conducts information security education and strives to improve the knowledge of the Shinwa Group’s employees, etc.
-
Maintenance of information security
We will periodically undergo audits by the Internal Audit Office or external organizations specializing in security, maintain the appropriate and continuous operation and management status, and strive to make improvements as necessary.
-
Response to information security incidents and accidents
In the event that an information security incident or accidents occurs, we respond quickly and appropriately in order to prevent damage from spreading, and strive to prevent recurrence.
If employees, etc., of the Group violate the Information Security Basic Policy, the employees, etc., will be dealt with in accordance with various regulations such as employment regulations.