TRUSCO NAKAYAMA Corporation and its consolidated subsidiaries (hereinafter referred to as "our group") properly protect the acquired information assets and protect them from threats such as accidents, disasters, crimes, etc., based on the following information security policy. I will work on management.
- (1) We will comply with information security-related laws and guidelines such as the Personal Information Protection Law and the Unauthorized Computer Access Prohibition Law in accordance with the guidelines set by each country.
- (2) In order to systematically and continuously improve information security, we will appoint an information security manager and actively carry out activities centered on the information security managers of each department.
- (3) Recognizing that ensuring information security is an important responsibility, we will endeavor to properly manage the information assets we handle.
- (4) We will take necessary and appropriate safety management measures against threats such as loss, destruction, falsification, leakage, unauthorized access, and various vulnerabilities of information assets.
- (5) When the Group outsources all or part of the business that handles information assets, it is necessary for the outsourcee to thoroughly examine the eligibility including the information security level and to handle the information assets appropriately. We will carry out appropriate supervision.
- (6) In order to properly protect information assets, we will strive to improve information security literacy by ourselves.
- (7) In case of an accident related to information security, we will establish a system and process so that we can respond appropriately and promptly, and in the unlikely event, we will act to minimize the damage.
- (8) In order to objectively and rationally evaluate the handling of information assets, we will work on continuous improvement through regular audits and take strict measures when violations or deficiencies are found in the matters to be observed.
