Information Security Policy

Based on its mission and management philosophy, TAIYO YUDEN Group appropriately manages information assets entrusted by its customers and business partners and information assets held by TAIYO YUDEN Group, recognizes that the maintenance and improvement of information security is one of its major business challenges, has established the following policy and will continue to take measures for information security.

TAIYO YUDEN positions information security as one of the most important management issues affecting business continuity and related to maintaining and enhancing corporate value over the medium- to long-term. We established a global information security management system and promote company-wide initiatives under the Information Security Policy.

At TAIYO YUDEN, we recognize various information assets, such as manufacturing processes, technical information, and customer information, as critical assets that are a source of competitive advantage, and we protect and manage these assets appropriately based on the level of risk.
Cyber risks, especially those affecting production sites, directly impact product quality and supply stability, thus we implement multi-layered security measures in the OT domain^*, including production equipment, to strengthen the resilience of our manufacturing infrastructure.

The Chief Information Security Officer (CISO) is responsible for overseeing company-wide information security measures and incident responses.
The Information Security Committee, chaired by the CISO, meets regularly to discuss the information security policy, the progress of various countermeasures, and the status of incident responses, among other matters. The details of these discussions and other key issues are reported to the Sustainability Committee twice a year and incorporated into management decision-making and oversight.
In practice, the Information System Division serves as the secretariat and promotes information security management across the Group.

The Computer Security Incident Response Team (CSIRT) leads the initial response, ascertains the scope of impact, and implements containment and corrective measures. Incidents are promptly reported to the CISO, and when necessary, discussed by the Information Security Committee before being reported to the Sustainability Committee. As a result, we have established a system that ensures consistent decision-making and instruction, from on-site responses to management level resolutions.

We continuously assess risks related to information assets and implement a multi-layered management approach combining organizational, human, physical, and technical countermeasures.
In addition to establishing Group-wide regulations related to information security, we are working to improve information security literacy through training for new hires, regular training for all employees, role-based training, and suspicious email and incident response training.
In addition to controlling access to server rooms, production processes, and other critical areas, we implement integrated security measures combining a defense-in-depth, including malware countermeasures, vulnerability countermeasures, and network security measures, with access rights management and encryption.

TAIYO YUDEN Group is steadily advancing its efforts to obtain ISO 27001 and TISAX certifications to ensure high-level information security that meets our customers' trust.

For details on the scope of each certification, please refer to the following certifications (PDF).

Several sites within the TAIYO YUDEN Group have obtained TISAX (Trusted Information Security Assessment Exchange) certification, as defined by the German Association of the Automotive Industry.
TISAX is a registered trademark and is governed by the ENX Association ^*1.
TISAX assessment results can be accessed via the ENX Portal ^*2. Please note that only individuals with an ENX Portal account are able to log in, and that TISAX and its results are not intended for public disclosure.