Information Security

Information Security Basic Policy

For our company, information assets (information, information systems, etc.) are the most important assets, serving as the source for generating profit in our business activities across the Digital Certificate and eSignature Segment, the Cloud Infrastructure Segment, and the Digital Transformation Segment. Preventing information security incidents before they occur is also a social responsibility. In order to protect our information assets from information security threats, we hereby declare that we will handle information assets accurately and safely, realize information security aligned with our management strategy, and live up to the trust of our customers.

1. We strive to ensure the confidentiality, integrity, and availability of important information assets.
2. We respect our contracts with customers as well as legal and regulatory requirements.
3. We reliably implement the various measures required to establish information security.
4. In using software products and information products, we comply with licenses and other terms and use them appropriately.
5. All personnel involved in the use and operation of our information assets comply with information security-related rules.

Acquisition of the ISMS International Standard "ISO/IEC 27001:2022"

GMO GlobalSign Holdings K.K. (President & CEO and Executive Officer: Aoyama Mitsuru; URL: https://www.gmogshd.com/) acquired, as of November 16, 2006, "ISO/IEC 27001:2005," the international standard for ISMS (Information Security Management System), which is a third-party certification standard regarded as the global standard for information security management.

In addition, our renewal audit has certified that we conform to the "ISO/IEC 27001:2022" ISMS standard.

As a certified company, we are entrusted with the information of many customers through our hosting service business and our software license sales business. Recognizing that our responsibility as a company that handles customer information is significant and that taking appropriate protective measures is extremely important, we have established internal standards and carried out rigorous operations to date. With this certification, it has now been objectively demonstrated that our information security management is maintained and operated at a high level.

Treating this as a single milestone, we will continue to strive to maintain, operate, and improve our information security management in order to remain a company that our customers can trust even more.

Acquisition of the Cloud Services Information Security International Standard "ISO/IEC 27017:2015"