In order to address evolving environmental changes such as the intensification of cyberattacks, the proliferation of specialized applications, increased workforce mobility, and growing demands for the use of generative AI as well as the diversification of associated risks, Mitsui Chemicals Group recognizes Information Security as a critical management issue. We are continuously implementing the following Initiatives and will further strengthen our systems going forward.
日本語
English
Information Security
Initiatives
Initiatives Based on Technology and Systems
- Ensuring the rigorous enforcement of information management rules through the establishment and operation of internal regulations related to information security, including the Rules for Administration of Company Information, Company Information Handling Procedures, Personal Information Protection and Management Rules, Information System Management Rules, Detailed Rules for Information System Security, Information System Security Procedures for Users, Control System Security Management Procedures.
- Preventing unauthorized access to confidential information in our business systems through managed access.
- Establishing rules for including confidentiality clauses in contracts when engaging in transactions with third parties such as suppliers.
- Building and operating a security operation center (SOC) that is responsible for detecting attacks and determining countermeasures.
- Raising awareness of the obligation to report to the Security Incident Response Team (SIRT) when suspicious events occur.
- Implementing assessments and vulnerability diagnostics via external agencies regarding security measures.
Initiatives Based on Training
- Developing and reviewing business continuity/contingency plans and incident response procedures, along with the execution of recovery drills according to these procedures (annually).
- Training and education on security risks for Group employees and monitoring the level of their information security literacy. (with mandatory e-learning on information security for all employees once a year)
- Targeted email attack response training for Mitsui Chemicals and domestic affiliated companies and follow-up training for specific persons.
- Providing education to our employees on information security and personal information protection. (mandatory e-learning course)