TOSEI CO., LTD. (the organization) develops software. As a provider of intangible services, we regard customer trust as our greatest asset. We have established this Information Security Policy to continue earning that trust. Under this policy, we establish, implement, operate, monitor, maintain and improve our ISMS, demonstrating our reliability through practical action. Everyone in the organization shares this objective. By complying with our policies, rules, procedures and confidentiality agreements with customers, we build a culture that prioritizes information security.
Information security objectives & maintenance
1. Our objective is to continue earning customer trust by preventing loss, theft, misuse and leakage of assets. We ensure and maintain the confidentiality, integrity and availability of assets entrusted by customers and personal information and assets acquired by the organization.
Scope
2. All operations of the organization fall within the scope of the ISMS and QMS.
Top management responsibilities
3. Top management assumes the following responsibilities and pursues continual improvement.
A) Establish the information security policy and communicate it throughout the organization.
B) Define objectives and plans for advancing the ISMS.
C) Define information security roles and responsibilities.
D) Provide the resources required to establish, implement, operate, monitor, maintain and improve the ISMS.
E) Determine the risk assessment framework, risk acceptance criteria and acceptable levels of risk.
F) Conduct periodic internal audits and management reviews to evaluate the effectiveness of controls.
Duties of the information security manager
4. The information security manager promotes ISMS activities and works with information security officers to establish, implement, operate, monitor, maintain and improve the ISMS.
Asset identification, risk assessment & control selection
5. The information security manager and officers identify assets handled by the organization and their owners. They assess risks in a manner appropriate to our business scale and activities, and select reasonable and appropriate controls to protect those assets.
Personal information protection
6. We protect personal information in accordance with our company-wide privacy policy and respect individuals' right to control their personal information. In accordance with laws and government guidelines and standards, we specify and publish or notify purposes of use, and limit collection, use and provision to those permitted by law and those purposes. We also respond to complaints and requests for disclosure and related actions concerning retained personal data.
Legal compliance
7. We manage customer and organizational confidential information under the Unfair Competition Prevention Act. We appropriately manage software and other works to respect rights under the Copyright Act, and identify and comply with other laws relevant to our operations.
Employee obligations
8. All personnel must comply with the information security policy and ISMS rules and procedures. Violations are subject to disciplinary action under the organization's employment rules and other applicable provisions.
Education
9. Under top management's direction, the information security manager and officers conduct ISMS education and training.
Established: August 30, 2022
TOSEI CO., LTD.
Representative Director: Wang Ping