Risk Management
The Bandai Namco Group has established the Group Risk Management Committee, chaired by the President and Representative Director of Bandai Namco Holdings Inc. The committee’s members include full-time directors, the representative directors and presidents of its business management companies, as well as designated individuals, and it has a secretariat. With this organization in charge, we have strengthened Groupwide risk management and put into place a system to respond to crises. Within this framework, we are working to enhance information security.
The Group Risk Management Committee meets once a year to identify significant risks facing the Group and determine response policies. Crisis information for the Group reported to the Group Risk Management Committee is also reported monthly at regular meetings of the Board of Directors of Bandai Holdings.
Approach to Information Security
The Bandai Namco Group recognizes that its initiatives for information security represent an important element of the Group’s business execution. We are working to safeguard our information assets while also taking into account changes in the legal and social situations.
We are working to prevent incidents by implementing appropriate information security countermeasures based on the value of our information assets pursuant to the Group Information Security Management Rules compliant with laws, regulations, and other rules. Maintaining and strengthening our information security system is considered a companywide action as part of our daily management and operating activities rather than the responsibility of individual organizations in charge. With this in mind, we strive for continuous improvement.
Implementation System
At Group companies, the President and Representative Director appoints a Chief Information Security Officer (CISO) as the ultimate person responsible for information security.
Bandai Namco Holdings has established the Group Information Security Committee as a dedicated organization for the maintenance and improvement of the information security system across the Group.
*Director responsible for the Digital Technology Management Department
Main Roles of the Group Information Security Committee
- Gather and analyze information on the Group’s information security system as well as plan and propose improvements
- Review the Group’s rules and regulations on its information security system
- Training of the Group’s officers and employees, as well as monitoring and assistance for awareness-raising activities
- Monitoring and assistance for the Group’s information security activities
- Planning and monitoring of measures to prevent information security incidents
- Information-related collaboration inside and outside the Group
Main Roles of Information Security Committees at Group Companies
- Each company establishes its own information security system
- Each company reviews and implements its own information security measures
- Execute Groupwide information security measures and report to the Group Information Security Committee
Main Information Security Activities
- Group Information Security Committee meetings
- Targeted email training
- Incident response training
- Public web services vulnerability assessment
- Information security monitoring
Response to Information Security Risks or Crises
In case of an information security-related contingency, the Group CISO will immediately implement necessary countermeasures and respond following the Group Risk Management Rules along with operational rules and guidelines.
Management of Personal Information
Services provided by the Bandai Namco Group may, on occasion, require that we obtain personal information from customers. Bandai Namco Holdings has established and operates a privacy management system to strictly manage important personal information. Similar systems are also in place at Group companies. In addition, the Bandai Namco Group Basic Regulations on Privacy Protection and the privacy regulations of each Group company stipulate the appropriate handling of personal information in accordance with the laws and regulations of each country, such as obtaining only the information necessary to achieve business purposes and minimizing access rights. Group companies have established personal information management ledgers to visualize the handling of personal information in processes from acquisition to deletion.
Example: Personal Information Management System of Bandai Namco Holdings
| Name | Roles |
|---|---|
| The Chief Administrator of Personal Information Protection (CPO) |
|
| Personal Information Protection Management Office |
|
| Audit Administrator |
|
| Administrator of Personal Information Protection for Each Department |
|
| Department Officers |
|
Information Security Training
The Bandai Namco Group educates all employees about the importance of information security in their duties. We also make the Group Information Security Management Rules known to all to ensure information assets are managed and used appropriately. In addition, we provide training on information security to all Group employees in Japan and abroad.
Main Information Security Training
- E-learning on information security and personal information for employees
- Information security seminar for persons in charge
- Information security seminar for employees