Corporate Information Security Policy
April 1, 2007
In the highly computerized society by continuous and rapid growth of IT and its network technologies, the threats of illegal/unauthorized access to the computer system become larger and larger, requiring a well-organized comprehensive management system of information Security.
Chiyoda bellies that the maintaining the confidentially and integrity of and maximizing the use of its own business and technical information resources developed through its years of experience as well as the confidential information entrusted to Chiyoda from time to time by its business partners such as clients, licensors and joint venture partners are fundamental to the company's engineering ability. All company personnel, in cooperation with its clients, vendors, subcontractors and other business partners, shall advance the information security in accordance with the following basic policy:
- Recognition of Information Assets as Management Resources
All directors, officers and employees of Chiyoda recognize that information is Chiyoda's important asset, and protection thereof, as well as its effective utilization, should be the base of reputation and credit.
- Protection of information Resources
- All directors, officers and employees of Chiyoda shall not disclose any information assets inside and outside of Chiyoda, nor use the same for any other purpose than originally intended.
- All directors, officers and employees shall not make access to any information assets which are not relating to their own business.
- It is further understood that any access, transfer, revision and carrying in/out of any information assets shall be made with approval of the relevant managers.
- For potential of anticipated violation in the information security management system, a report shall be made to the responsible person and countermeasures shall be taken to secure the information.
- For actual violation or the symptom of violation in the information security management system, remedies for such breach shall be immediately reported to the responsible person.
- Integrity of Information Resources
- Information shall be maintained in accordance with the rules.
- Information shall be updated with the latest changes and status.
- Damaged Information shall be returned to the original condition.
- Readiness of Information Resources for Use
- Method for use of information assets shall be correctly understood.
- Threats and risks for information assets shall be analyzed, and proper countermeasures shall be considered foe its use.
- Computer information systems and application software shall be used proficiently.
The company's all directors to office staff, regardless of working places, shall proceed with the directives set forth in this policy.