Information security policy

Basic Philosophy

Rimo Co., Ltd. (hereinafter referred to as "the Company") operates under the philosophy of "Creating a Future with Work". Within our business, information assets, including customer information, are extremely important as the foundation for our management. Recognizing the importance of protecting information assets from risks such as leakage, damage, and loss, those involved in handling information assets, including executives and employees, will comply with this policy and practice activities to maintain information security, such as confidentiality, integrity, and availability of information assets.

Basic Policy

1. In order to protect the information assets entrusted by customers and those held by our company, we have established an information security policy as well as related regulations and conduct our business in accordance with them. We also comply with laws, regulations, and other standards related to information security, as well as contractual obligations with customers.

2. Clearly define criteria for analyzing and assessing risks such as leaks, damage, and loss related to information assets, and establish a systematic risk assessment method. Regularly conduct risk assessments and implement necessary and appropriate security measures based on the results.

3. Establishing an information security system centered around the responsible officer, clarifying powers and responsibilities regarding information security. Additionally, all employees will receive regular training, education, and awareness to ensure recognition of the importance of information security and the proper handling of information assets.

4. Regularly conduct inspections and audits on compliance with information security policies and the handling of information assets. Any identified deficiencies or improvement items will be promptly rectified.

5. Taking appropriate measures in response to events and incidents related to information security and establishing response procedures in advance to minimize damage in case they occur, and responding promptly with appropriate corrective measures. In particular, for incidents related to business interruptions, we will establish a management framework and regularly review it to ensure business continuity.

6. Establishing an Information Security Management System (ISMS) that includes cloud services with defined goals to realize the basic philosophy, executing it, and continuously reviewing and improving it.

Revised on June 12, 2022
Established on February 24, 2021
Rimo Co., Ltd.
Representative Director Naoyoshi Aikawa