Risk Management
The Bandai Namco Group has established the Group Risk Management Committee, chaired by the President and Representative Director of Bandai Namco Holdings Inc. The committee’s members include full-time directors, the representative directors and presidents of its business management companies, as well as designated individuals, and it has a secretariat. With this organization in charge, we have strengthened Groupwide risk management and put into place a system to respond to crises. Within this framework, we are working to enhance information security.
Composition of Group Risk Compliance Committee
Approach to Information Security
The Bandai Namco Group recognizes that its initiatives for information security represent an important element of the Group’s business execution. We are working to safeguard our information assets while also taking into account changes in the legal and social situations.
We are working to prevent incidents by implementing appropriate information security countermeasures based on the value of our information assets pursuant to the Group Information Security Management Rules compliant with laws, regulations, and other rules. Maintaining and strengthening our information security system is considered a companywide action as part of our daily management and operating activities rather than the responsibility of individual organizations in charge. With this in mind, we strive for continuous improvement.
Group Information Security Management Regulations and Related Guidelines
Implementation System
At Group companies, the President and Representative Director appoints a Chief Information Security Officer (CISO) as the ultimate person responsible for information security.
Bandai Namco Holdings has established the Group Information Security Committee as a dedicated organization for the maintenance and improvement of the information security system across the Group.
Group Information Security System
*1Director responsible for the Information Systems Department
*2CSIRT stands for Computer Security Incident Response Team; an organization that implements information security countermeasures.
Main Roles of the Group Information Security Committee
- Gather and analyze information on the Group’s information security system as well as plan and propose improvements
- Review the Group’s rules and regulations on its information security system
- Training of the Group’s officers and employees, as well as monitoring and assistance for awareness-raising activities
- Monitoring and assistance for the Group’s information security activities
- Planning and monitoring of measures to prevent information security incidents
- Information-related collaboration inside and outside the Group as the Group’s CSIRT
Main Roles of Information Security Committees at Group Companies
- Each company establishes its own information security system
- Each company reviews and implements its own information security measures
- Execute Groupwide information security measures and report to the Group Information Security Committee
Main Information Security Activities
- Group Information Security Committee meetings
- Targeted email training
- Incident response training
- Public web services vulnerability assessment
- Information security monitoring
Response to Information Security Risks or Crises
In case of an information security-related contingency, the Group CISO will immediately implement necessary countermeasures and respond following the Group Risk Management Rules along with operational rules and guidelines.
Management of Personal Information
On occasion, the services provided by the Bandai Namco Group require that we obtain customers’ personal information. To ensure that we carefully manage this personal information, Bandai Namco Holdings and its Group companies maintain and operate a privacy management system compliant with the privacy laws of the countries where we operate. Additionally, the Personal Information Protection Guidelines of Bandai Namco Holdings set forth the appropriate handling of personal information, including the acquisition of only the minimal information necessary, optimization of access rights, and deletion of information after the purpose of use has been achieved. We obtain and handle customers’ personal information carefully following these guidelines after disclosing the purpose of use in advance. At the same time, we have established a groupwide personal information management ledger to visualize processes from acquisition to deletion.
Privacy Protection System
| Name | Roles |
|---|---|
| The Chief Administrator of Personal Information Protection (CPO) |
|
| Personal Information Protection Management Office |
|
| Audit Administrator |
|
| Administrator of Personal Information Protection for Each Department |
|
| Department Officers |
|
Information Security Training
The Bandai Namco Group educates all employees about the importance of information security in their duties. We also make the Group Information Security Management Rules known to all to ensure information assets are managed and used appropriately. In addition, we provide training on information security to all Group employees in Japan and abroad.
Main Information Security Training
- E-learning on information security and personal information for employees
- Information security seminar for persons in charge
- Information security seminar for employees
