Information security policy

情報システムの
運用・保守サービス

– We have acquired ISMS certification with the scope as below.

First registration 12/6/2006
Certification standard ISO/IEC27001:2013
JISQ27001:2014
Registry number IS 503856
Scope of registration Operation and maintenance service of information system

Basic policy of information security

– We understand that information processing-service company shall have social responsibility for assuring safety management of information asset. Therefore, we declare that will approach information management system proactively to secure protection of information asset to deal with properly by establishing our information security policy as below, which is shared with officers and employees.

Approach to information security

– We will protect our management asset (information asset) from every threat by building an information security management system to secure required information security by both system side and management side approach.

Target

– We will keep high-level information security by continuous improvement effort and proper action for the information security risk.

Protection of information asset

– We will control information asset in the scope of our responsibility by applying necessary measures in accordance with the importance and from the point of usage and access right.

Compliance with regulations

– We will comply with information security related law and other social norms such as legal requirements, customer requirements and security responsibility specified in contract.

Education and training

– We plan and conduct education and training program periodically in accordance with job assignment for necessary information security.

Accident prevention and response to accident

– We strive to prevent information security accidents, in case of an accident, we will analyze the cause of the accident immediately and take necessary measures to prevent recurrence of the accident.

23/5/2016
ICOMSOFT Inc.
President and representative director, Kimiaki Nakamura