ProfileRisk Management

StrategyFoundation

RM

To avert business continuity crises and prepare for unforeseen circumstances, the Sanyo Chemical Group has establishedinternal regulations to cope with each possible risk. We conduct risk management by raising the risk awareness of employees by providing training and holding drills.

Risk management system

which stipulates the purpose and methods of use of personal information and its management, as well as consul-In order to address risks surrounding the Group, internaltation procedures regarding such information. The policy

regulations such as the Operational Responsibilities Reg-was revised in line with the amended Act on the Protec-ulations, the Basic Regulations for Product Liability (PL),tion of Personal Information, which came into effect inand the Information System Security Regulations have

April 2022. We have the Personal Information Protection

been formulated, and the departments in charge shallManagement Regulations in place to realize appropriate

manage the risks. The Auditing Division (Business Audit-protection under this policy. Regarding the Individual

ing Department or Technical Auditing Department) underNumber (My Number) system, rules are established in

the direct control of the President monitors the status of

the Specific Personal Information Handling Regulations.

risk management with the Group. If a risk is identified,

An IT system capable of ensuring security is used for

the Auditing Division gives instructions to formulate cor-operation. We also comply with the Social Media Policy,

rection and recurrence prevention measures, checks thewhich was formulated regarding the operation of official

details, and follows up on the status of implementationsocial media accounts and the use of social media byby the relevant departments. Regarding important com-respective employees.

pliance risks, the Compliance Committee discusses anddetermines the basic policies and measures.

Overseas crisis management activities

Business continuity plan (BCP)The Sanyo Chemical Group has established and implemented the Basic Regulations for Overseas Crisis Man-

The Group draws up and operates BCPs that prepareagement, which set forth basic points for reducing risks

for response in the event of a massive earthquake or athat may cause harm to the lives, bodies, and property ofpandemic. The Internal Control Department of the BCP

the Group employees outside Japan, and for responding

Secretariat takes the initiative in conducting a review

to an overseas crisis if such an event should occur. The

every year to make the BCP further effective. We also

regulations specify the crisis management organizations

continuously hold practical drills in each region.

and the chain of command that will function in the caseof emergency and define the responsibilities and author-Information management

ity of the Overseas Crisis Management Secretariat andthe response headquarters, so that appropriate respons-Information assets are crucially important for companies.

es can be made accordingly. The Overseas Crisis Man-

Leakage of information assets is likely to pose the risk

agement Secretariat is established within the Personnelof damaging corporate value. Recognizing the impor-

Division to constantly gather and analyze informationtance of confidential information, we have the Security

and issue overseas travel warnings as necessary. When

Management Regulations in place to prevent informationa BCP is implemented, the overseas crisis management

leakage, ensure proper use, and prevent unauthorizedorganizations will work in coordination with the Businessacquisition, use, and disclosure of confidential informa-

Continuity Task Force.

tion of third parties. We ensure security by establishing
the Information System Security Regulations and the Personal Computer and Network Management Regulations,introducing a firewall and other network security systems,
managing licenses for the use of information systems,
and limiting access to the Internet. To raise the security
awareness of employees and prevent information security accidents, we offer information security education
every year.
As for the protection of personal information, we havelaid down the Personal Information Protection Policy,

Sanyo Chemical Group Integrated Report 202350