Information security and personal information protection

We established the basic policy on ensuring and controlling information security (ensuring and protecting confidentiality, integrity and availability of the information) regarding information assets in 2004 to reinforce information security. Concretely speaking, information security supervisor conducted the followings in corporation with information security managers and information system managers of each department under the information committee which is directly under president's control.

• Conducting risk assessment
• Creating and revising the documents on information security action standard and implementing procedure
• Implementing security plans
• Conducting the training and instructing of security plans
• Conducting self-audit on implementation of security plan and reporting the result of the self audit to the information security committee

We hold such personal information as customer information, partner information, shareholder information and employee information. In order to properly manage and use the information and to prevent any leakages, we established the Personal Information Protection Committee in December 2004 as well as the Personal Information Protection Policy and Personal Information Protection and Control Rules in January 2005 for thorough protection.

Please send us your opinions and impressions concerning this article.