Information Security Management

SMAS has established internal rules covering all operations, the organizations and people involved in them, and all information assets, with particular focus on electronic information that requires a high level of management control.
Within this framework, we have built systems and mechanisms to ensure proper operation of the following items, and conduct regular reviews:

1. Management based on quantification (as necessary, depending on the characteristics of each risk)
2. Ensuring alignment with business strategy
3. Establishment of a control structure
4. Preparedness for emergencies or critical situations
5. Verification of the framework (verified by the Corporate Auditing Department)

Furthermore, to protect information assets from cyberattack methods that are rapidly becoming more advanced and sophisticated, we are strengthening various technical measures. At the same time, recognizing that information security fundamentally depends on people, we are placing even greater emphasis on employee education.