Information Security Policy

At JIJ Inc., we recognize that information security management is a critical priority for our business.
We have established an Information Security Management System (ISMS) in compliance with JIS Q 27001 (ISO/IEC 27001).
We are committed to protecting the information assets of our customers and our Company, preventing security incidents, and striving for the continuous improvement of our information security measures.
To uphold the trust of society and our customers, we hereby declare the implementation and promotion of this "Information Security Policy."
Policy Principles

1. We implement appropriate organizational and technical measures to ensure the confidentiality, integrity, and availability of information assets, proactively responding to evolving technologies and emerging threats.
2. We provide information security education to all employees to ensure this policy is thoroughly understood and to enhance and maintain a high level of security awareness throughout the organization.
3. We establish information security objectives, conduct periodic reviews, and are committed to the continual improvement and effective operation of our management system.
4. We assign the necessary responsibility and authority to the ISMS management representative to ensure the implementation, operation, and continual improvement of the ISMS.
5. In the design, development, and provision of cloud services, we establish and implement a management system to securely manage customer information, protect against all threats in the cloud, and minimize risks.
6. We select and use external cloud services that comply with our established security policies and fall within our acceptable risk levels.
7. In the event of an incident such as data breach or unauthorized access, we promptly report to the ISMS management representative and take appropriate action. We also notify affected users and report to relevant authorities.
8. We comply with laws and regulations related to information security. We also review this policy as appropriate in response to legal amendments.