Information Security Basic Policy

Effective February 22, 2023
Ishida Co., Ltd.
Takahide Ishida, President

1. Objective

Ishida Corporation (hereinafter referred to as "Our Company") recognizes that the correct management of information assets is one of the most important issue, and takes strict care of confidential information entrusted to us by our customers and business partners, or owned by Our Company. Through proper defense measures (hereinafter referred to as "Information Security System") against risks such as information leakage, we are committed to becoming " The fittest of the times". Following the corporate philosophy of the "Three Way Harmony", we will establish the following information security basic policy to work on information security in an organizational and continuous manner.

2. Information Security Basic Policy

（1） Establishment of Information Security System

Our Company will establish the Information Security System and work to maintain, improve, and enhance the Information Security System.

（2） Protection of Information Assets

Under the Information Security System, Our Company will strive to protect information assets.

（3） Improvement of Information Security Literacy

Our Company will continuously conduct education and training to improve information security literacy for all employees and to implement appropriate management of information assets.

（4） Response to Information Security Incidents and Accidents

In case of information security incidents or accidents, or if there is a precursory sign, Our Company will take quick action and procedures.

（5） Compliance with laws and regulations

Our Company complies with laws and regulations related to information security, guidelines set by the government, contractual obligations, and other social norms.

（6） Providing safe products and services

In all activities such as development, design, and production of products and services, Our Company will take information security measures to provide safe products and services.

（7） Ensuring Business Continuity

Our Company will minimize business interruptions caused by accidental information system disasters, faults, negligence, and intentional misuse of information assets, and maintain business continuity.

（8） Implementation of continuous improvement

Our Company will conduct regular assessments and reviews of the above commitments to implement continuous improvements in information security.