Information Security Policy

By appropriately handling the information assets and by protecting it from any threat, the Japan Corporate Governance Network (JCGN), shall, maintain trust of the corporate members, as our customers, vendors, shareholders and employees, and fulfill our social responsibility as a non-profit organization. JCGN will fulfill its obligations set by relevant laws and ordinances, including but not limited to those which are set forth in the Security Management Rules, Personal Information Protection Law as well as regulations, internal company rules, and contractual obligations relating to information security, and to implement and follow the Information Security Policy noted below:

1) JCGN will make efforts to keep personal data accurate and up-to-date to the extent necessary to achieve the purpose of utilization. Also, JCGN treats the protection against unauthorized access, loss, destruction, manipulation or a leak as the highest priority.

2) JCGN does not use information assets for any thing other than the determined purposes, and will utilize them at maximum efficiency in order to implement appropriate security measures at appropriate levels.

3)JCGN has an Officer of Personal Information management who is in charge of security for members’ information through its implementation, its application, and its advancement.

4) JCGN offers its officers and staff members periodic education programs regarding information security so that they can fulfill their duty and responsibility determined by the regulations.

5) When JCGN acquires member information, JCGN identifies or declares the intention of the use of this information to the member. In addition, JCGN will disclose the intention of use of this information promptly if a member requests it after the acquisition. JCGN shall not disclose nor provide any personal data to any third party. Also, JCGN will take action immediately, within reasonable limit, when a member asks for inquiry, correction, or deletion of contents.

6) In the case of third party information outsourcing, JCGN will take appropriate measures such as complying with our company's information security policy and information security-related regulations, as well as stipulating the management responsibilities of subcontractors.

In addition, the following information covers the purpose of information acquisition;

a. Organization, operation and management of events, seminars, etc.
b. Providing information on JCGN services, events and seminars, etc.
c. Development of new products and services, and analysis for the improvement and enhancement of JCGN services
d. Statistic data acquired from each research
e. Providing information for new members

7) JCGN complies with laws and other norms related to information security. The corporation will strive to continually review and improve this policy in response to changes in related laws and the law corporate environment.

As of July 1, 2017