The JVCKENWOOD Group recognizes the importance of the management of confidential information and the protection of personal data processed in our business activities, and we operate our business in compliance with the variety of regulations that govern information management. The group employees perform their day-to-day duties keenly aware of the importance of information management, ensuring that they comply with laws and regulations on personal data protection at all business locations in Japan and other countries. Some of the group companies (e.g., JVCKENWOOD Creative Media) have obtained the ISO27001 certification, and we will be recommending other group companies to acquire such certification as needed.
JVCKENWOOD Group’s comprehensive policy on information security
Policy on product security for products manufactured/sold by the JVCKENWOOD Group
Policy on JVCKENWOOD Group’s information assets
We have been working to protect personal data under the JVCKENWOOD Group Personal Data Protection Policy. We have long recognized the importance of protecting the personal data of customers, business partners and employees, but public demands in this regard have recently become even more stringent. In light of the 2017 revisions to the Act on the Protection of Personal Information, greater efforts to protect personal data are necessary to address the growing business on Internet of Things (IoT).
Against this backdrop, the relevant organizations within the JVCKENWOOD Group have begun collaborating in the implementation of IoT security countermeasures, including personal data protection, in line with the amended Act on the Protection of Personal Information to ensure that the personal information of people using our products/services is not improperly used. We will be monitoring new legislation and social needs as we address this issue company-wide to ensure that our customers can use our products/services with peace of mind.
The JVCKENWOOD Group regularly conducts IT security training for our employees in Japan. This training is implemented as simulation for targeted e-mail attacks and as programs for general employees, PC advisors, and new employees, respectively. In FY2017, the relevant items were covered in tier-specific training, with more than 90% of participation rate for general employees.
Various types of IT security training have been implemented, and the special training was provided in FY2017 to employees in Japan who had opened suspicious e-mails. The number of employees who opened such e-mails has been dropping, with the participation rate for FY2017 being 37%. We hope to make more employees aware of the need for such training and create workplace environments that facilitate participation of training. We are determined to reduce the percentage of employees opening suspicious e-mails and improve the training participation rate.