Basic Policy
Our company and Group companies, founded on the fundamental desire to help people when they need it, aim to unite the power of all our staff and to continue developing Supporter Value Creation, so that we can provide truly useful weather services to each individual around the world, together with local communities. We also recognize that providing these services continuously and stably is our corporate social responsibility, based on the idea that weather is the fifth public asset, a form of public infrastructure following water, electricity, transportation, and communication
In order to continue providing services of such social importance, we establish and comply with this Basic Policy, with the aim of protecting the information assets of both our supporters and ourselves from all threats, and of working to ensure the necessary level of information security.
1. Compliance with Various Laws and Regulations
We comply with the various laws, requirements, regulations, rules, and contractual obligations related to information security, as well as other social norms. Should any violation occur, we will respond appropriately.
2. Construction of Information Security Management System
To protect and properly manage all the information assets we hold, we appoint the executive officers in charge of each business division (planning) as information security officers, and establish a system that can promptly implement information security measures.
3. Implementation of Risk Assessment and Countermeasures
To guard against all threats to the confidentiality, integrity, and availability of important information assets, we carry out risk assessments and countermeasures, review risks on a regular basis, and work to prevent the leakage, loss, and tampering of information.
4. Implementation of Information Security Education
We provide all staff with the information security education appropriate to their duties and work, and work to thoroughly instill our basic policies and various regulations and to raise awareness of information security.
5. Response to Information Security Emergencies
When an information security emergency occurs, we respond quickly and appropriately and implement measures to prevent any recurrence.
6. Inspection and Improvement
To confirm that information assets are being managed properly, we conduct internal audits regularly and verify the results. Furthermore, taking into account changes surrounding information security both inside and outside the company, we continuously improve our information security management system.
Information Security Basic PolicyMain Initiatives
Our Group has established the Information Security Management Regulations and the Personal Information Protection Regulations, with the aim of protecting the various forms of confidential information and personal information held by our Group, and of appropriately managing the confidential information and personal information entrusted to us by our business partners.
To improve literacy regarding information security, we conduct information security training for all employees once a year, as well as training on personal information protection. For the computers and smartphones used by employees, and with external use in mind, we have introduced MDM (Mobile Device Management), which enables data to be deleted remotely, and we have implemented HDD encryption and EDR (anti-malware software) in accordance with our regulations on the use of information equipment. We have also established procedures for responding to incidents such as loss, and have built mechanisms to minimize damage. In addition, we take stock of our information equipment every six months.
With regard to strengthening information security, the Information Security General Manager discusses and coordinates measures with the relevant departments and rolls them out across the entire Group. The implementation of each measure is led by the information security department.
