■Information Security Basic Policy
Mitsui-Soko Holdings recognizes that confidential information owned by Mitsui-Soko Holdings, and Mitsui-Soko Holdings' clients' confidential information given to us are information assets that require protection, and have established an information security management system, and to maintain the information security management system, have implemented and improved the following procedures.
- Establishment and Maintenance of Information Security Management System In order for employees (including temp staff and part time employees) that utilize Mitsui-Soko Holdings' information assets to understand and comply with the purpose of Mitsui-Soko Holdings information security basic policy, we have established an information security management system, and have established a organizational environment and risk management system to maintain the information security management system.
- Establishment of Security Countermeasure Standards
Mitsui-Soko Holdings has established an information security management system basic outline that designates basic requirements and criteria necessary for complying with the information security basic policy.
- Compliance With Other Related Laws and Regulations
Mitsui-Soko Holdings will comply with related laws and regulations and confidentiality obligations stipulated in the contracts, and will set voluntary management standards as necessary, and will carry out security maintenance. Furthermore, for external contractors, we have taken necessary measures to ensure that they will comply with our information security basic policy and information security management system basic outline via contracts. In addition, for the protection of personal information, we have designated personal information protection regulations separately and will take necessary measures.
- Establishment of Promotional Organization and System
Mitsui-Soko Holdings has designated a chief information security officer, and has established an information security management group and operating system, and have clarified roles and responsibilities.
- Employee Education
To increase employee knowledge and awareness of our information security basic policy and information security management system basic outline, Mitsui-Soko Holdings has established information security education programs and will implement these.
April 1st, 2005