Our information security management system

We proactively reinforce our information security system to ensure that management and other confidential information and personal data are not leaked. Regarding the our information security management system,we stipulate the Information Security Policy,and complies with administrative provision on Information Security at the same time. The status of information management is subject to verification through the submission of reports by executives in charge of the planning department to the board of directors. We have also established a disclosure committee within the company as part of our internal control system to strengthen our controls on information disclosure.

The information security management system of Okasan Securities Co., Ltd.

Okasan Securities Co., Ltd., has internal regulations and internal rules governing the use of computers and other information terminals as part of the management of system and information risks. Our information management system applies to the duties executed by executives and employees. In addition, by using access logs, operational monitoring, and access restrictions based on filter functions, the system prevents the unauthorized disclosure of personal data and confidential information. Furthermore, initiatives are in place to improve the awareness of information security by executives and employees through training sessions and other programs.

Complying with the Act for the Protection of Computer Processed Personal Data held by Administrative Organs

The appropriate management of personal information obtained from our clients is a social responsibility for which Okasan Securities Group Inc. and the Group as a whole are developing a personal information protection system.

The Privacy Policy addresses the handling of personal information and is employed by Okasan Securities Co., Ltd., and other securities companies in the Group. Members of the public can read it by visiting our website or any of our branches. In addition, efforts to prevent leaks of personal information are bolstered by internal regulations, rules governing the use of computers and other information terminals, and other regulatory provisions applicable to daily operations, as well as by regular internal inspections. Furthermore, training and education programs directed at executives and employees improve the awareness of the need to protect personal information.