TSUKIBOSHI

Basic Information Security Policy

Tsukiboshi Manufacturing Co., Ltd. (hereinafter, “the Company”) aims to be the world’s most outstanding company amid the growing complexity, diversity, and globalization of the market, so to provide better products and services, and to contribute to the development of society, we feel it is our duty to protect the information assets obtained from business partners as well as those of the Company, and we present here our commitment to establish and implement an information security policy.

1. Establishment of an Information Security System

The Company shall establish an information security system under strong top down leadership by the management, and shall make efforts to maintain and improve information security.

2. Scope of Information Assets

Information asset refers to the information, data, IT systems, and networks possessed or handled during the Company’s business activities.
This shall include all assets determined to require management, whether tangible or intangible.

3. Establishment of Internal Regulations for Information Security

The Company shall establish internal regulations based on the basic policy, and set forth a clear policy regarding the handing of all information assets.

4. Protection of Information Assets

The Company shall make efforts to protect all information assets in its possession from threats to its confidentiality, integrity, and utility.

5. Information Security Education and Training

The Company shall regularly conduct necessary education and training to ensure the security of information for all individuals involved in the Company’s business activities.

6. Responses to Security Incidents and Accidents

The Company shall respond in the event a problem arises in connection with the information assets handled by the Company, or when there are indications of such a problem.

7. Compliance with Laws, etc.

The Company shall comply with all laws and other societal rules related to the information security activities of the Company.

8. Revisions and Improvements

The Company shall make efforts to continuously revise and improve its activities based on this basic policy in response to changes in societal circumstances, technology, and laws, etc.