Basic approach

The IDEC Group regards information security-related risks as risks that directly affect management, and raise awareness among all employees. The IDEC Group will continue to work on information security measures through continuous improvement to protect its information assets from ever-changing threats and to secure the trust of our stakeholders.

Management system

The Information Security Subcommittee has been established within the IDEC Group's Risk Management Committee, with the chairperson appointed as the information security officer, to oversee information security management covering all applicable information assets and scope. To manage the progress of corrective measures based on an inventory and risk assessment of company-wide information assets, the subcommittee members are made up of those involved in practical operations from the relevant departments, and they work with department heads at IDEC headquarters and presidents of IDEC group companies to thoroughly communicate company-wide measures and promptly report and implement measures in the event of an accident.

Information security measures

As information technology evolves, cyber attacks become more sophisticated, and threats to information security are constantly changing. In order to reduce risk, it is important to continually assess the internal and external environment for information security and strengthen measures. In addition to technical measures, we also take organizational measures (rule development, education/awareness-raising/training, etc.) to ensure that all employees understand the importance of information security and take defensive action. 
We have established a system so that the Information Security Subcommittee can collect information, report to the management, and promptly take command of company-wide measures in case of an incident based on the basic procedures, followed by abnormality detection through monitoring and reports from employees. We will take measures based on the impact on stakeholders, including customers and business partners, as well as within the IDEC Group.

Education and Training

It is important that each and every employee understands the importance of information security and takes defensive action. 
We regularly provide information security education (e-Learning) for all employees, and also conduct training on targeted email attacks to raise awareness.

Protection of Private Information

The IDEC Group recognizes that it is its important social responsibility to properly protect and handle information that can identify specific individuals, such as the names, addresses, and email addresses of customers, suppliers, and business partners, and manages the information it obtains in accordance with its Privacy Policy.
 

■Privacy Policy