信息安全方针

基于本公司的使命和经营理念，妥善地管理客户和业务合作伙伴提供的信息资产和本公司持有的信息资产，并致力于维持和提高信息安全水平，太阳诱电集团（以下称为“本公司”）将其视为重要的经营课题之一，制定以下方针，采取持续性的信息安全措施。

TAIYO YUDEN positions information security as one of the most important management issues affecting business continuity and related to maintaining and enhancing corporate value over the medium- to long-term. We established a global information security management system and promote company-wide initiatives under the Information Security Policy.

At TAIYO YUDEN, we recognize various information assets, such as manufacturing processes, technical information, and customer information, as critical assets that are a source of competitive advantage, and we protect and manage these assets appropriately based on the level of risk.
Cyber risks, especially those affecting production sites, directly impact product quality and supply stability, thus we implement multi-layered security measures in the OT domain^*, including production equipment, to strengthen the resilience of our manufacturing infrastructure.

The Chief Information Security Officer (CISO) is responsible for overseeing company-wide information security measures and incident responses.
The Information Security Committee, chaired by the CISO, meets regularly to discuss the information security policy, the progress of various countermeasures, and the status of incident responses, among other matters. The details of these discussions and other key issues are reported to the Sustainability Committee twice a year and incorporated into management decision-making and oversight.
In practice, the Information System Division serves as the secretariat and promotes information security management across the Group.

The Computer Security Incident Response Team (CSIRT) leads the initial response, ascertains the scope of impact, and implements containment and corrective measures. Incidents are promptly reported to the CISO, and when necessary, discussed by the Information Security Committee before being reported to the Sustainability Committee. As a result, we have established a system that ensures consistent decision-making and instruction, from on-site responses to management level resolutions.

We continuously assess risks related to information assets and implement a multi-layered management approach combining organizational, human, physical, and technical countermeasures.
In addition to establishing Group-wide regulations related to information security, we are working to improve information security literacy through training for new hires, regular training for all employees, role-based training, and suspicious email and incident response training.
In addition to controlling access to server rooms, production processes, and other critical areas, we implement integrated security measures combining a defense-in-depth, including malware countermeasures, vulnerability countermeasures, and network security measures, with access rights management and encryption.

TAIYO YUDEN Group is steadily advancing its efforts to obtain ISO 27001 and TISAX certifications to ensure high-level information security that meets our customers' trust.

For details on the scope of each certification, please refer to the following certifications (PDF).

Several sites within the TAIYO YUDEN Group have obtained TISAX (Trusted Information Security Assessment Exchange) certification, as defined by the German Association of the Automotive Industry.
TISAX is a registered trademark and is governed by the ENX Association ^*1.
TISAX assessment results can be accessed via the ENX Portal ^*2. Please note that only individuals with an ENX Portal account are able to log in, and that TISAX and its results are not intended for public disclosure.

Our Group implements information security measures from organizational, human, physical, and technical perspectives.