We have organized a Risk Management Committee in order to manage the risks that affect our Group, and in order to address the various risks attendant upon our business activities, we have formed an internal system for risk management through which we run a cycle of risk assessment, risk reduction measure implementation, and reporting to the Risk Management Committee and executive committees. We are working to reinforce the risk management systems of our Group companies, and risk mitigation measures are undertaken at each site as needed. The Risk Management Committee also regularly monitors the management status of these efforts.

Risk management committee (members)

As of July 2023

IT Management Subcommittee

Under the Risk Management Committee, we have established the IT Management Subcommittee to promote cross-divisional information management measures. In addition to formulating Company-wide policies and supervising efforts to prevent information leaks and inbound threats, we conduct surveys on the current status of IT management systems at overseas sites, and we seek to improve the security level of the entire Group by understanding not only the technical aspects but also the actual situation in a wide range of areas, including the development of management rules and education for system users, and providing appropriate advice.

Information management subcommittee (Organizing members)

as of July 2023

Organizational position of the IT management subcommittee

Employee Training on Cyberattacks

In FY2022 the Information Management Subcommittee undertook efforts in the four areas of awareness-raising activities, monitoring, maintenance of regulations, and information gathering. We have joined in the activities of the Nippon CSIRT Association, which we joined in April 2022, and have also conducted employee education using the “Cyber Security Kawaraban” system, targeted e-mail training, and inspections for radio wave information leakage. We have also specified how to respond when incidents occur, and have clarified our response system.

BCP Initiatives

-Raise Awareness of BCP through Initial Action Drills-

We have created a Business Continuity Plan (BCP) in the event of a disaster such as a large-scale earthquake and in addition to disaster prevention drills and BCP drills for each business site, we are conducting BCP initial response drills that simulate various disasters in each factory. These activities begin with procedures for confirming the safety of employees in the event of an earthquake, followed by decisions on prioritization and methods of recovery work in the event that the plant is damaged, and securing the necessary personnel. By reviewing the problem areas we discover through this training, we will continue to upgrade our preparedness in order to respond appropriately if an emergency occurs.