Because our response to risk could profoundly affect the MinebeaMitsumi Group's business fundamentals, we believe that risk management is vital to the management of the company. We established the MinebeaMitsumi Group Basic Rules for Risk Management which define preventive measures we should have in place, our response in crisis situations, and the type of system the group should put in place.
Risk Management System
The CEO and COO of the MinebeaMitsumi Group has final responsibility for risk management, with major decisions regarding risk management being made by the Risk Management Committee. As a precautionary measure, MinebeaMitsumi attempts to predict and classify tangible risks in advance, and remains vigilant against such risks. In the unlikely event of an emergency, the severity of the situation is assigned a level of one to three, and after consultation by the Risk Management Committee, management headquarters and local countermeasures offices are established, to respond rapidly and effectively to the situation. Further, MinebeaMitsumi has organized a system under which―depending on the nature of the risk being managed―a supervisory division may be appointed to handle a situation, for which it will draft and implement responses.
Information Security Structure
The MinebeaMitsumi Group believes that protecting information assets is essential for building a relationship of trust. We have therefore established the Information Security Basic Policy, which we thoroughly implement.
We have also established an Information Security Committee, while organizing a promotion structure to implement measures in each country.
Information Security Training
To improve employee awareness of information security, the MinebeaMitsumi Group conducts information security training. Information security briefings are held annually, and tutorials are conducted in addition to training for new and experienced employees when they enter the company. In FY2016, a total of 13,753 employees attended information security briefings, including temporary employees and subcontracted employees.
Moving forward, we will continue to use our education systems to confirm prohibited actions and required actions regarding information security, share points that often lead to security incidents, and take other initiatives to raise employee awareness.
Initiatives to Protect Personal Information
Personal information retained by the MinebeaMitsumi Group is managed in accordance with our Personal Information Protection Policy. The purposes for which this information is utilized have also been clearly defined, and we strictly adhere to the parameters for scope of information use.
In the event of a major disaster, influenza, act of terrorism or other emergency, we believe that our Group's social responsibility includes confirming the safety of our employees and their families, as well as ensuring that, as a manufacturer of products with world-leading market shares, we can continually supply our customers and minimize the impact to our business. For that reason, we have begun formulating and implementing business continuity plans (BCP) for major business sites in and outside Japan.
BCP are plans based on an analysis of conceivable risk scenarios for each site, and their contents are determined in accordance with the risk levels. In terms of specific activities, BCP encompass the creation of emergency manuals, earthquake strengthening of facilities, storage of food, establishment of an internal fire brigade, disaster drills, and introduction of a personnel safety confirmation system, among other measures.
In FY2016, we formulated basic BCP for the Bang Pa-in Plant in Thailand and the Malaysia plant, and completed formulation of a BCP action plan for the Shanghai, Suzhou, and Zhuhai plants in China. Furthermore, at the Karuizawa Plant, we conducted BCP training drills three times to simulate our response to an earthquake. In addition, several divisions in Thailand acquired ISO 22301, an international standard for business continuity management. They also formulated plans for BCP drills and conducted training drills simulating flooding.
Future Issues and Goals
Moving forward, we will establish a BCP structure responsive to the various risks at our key bases worldwide and firmly establish the structure through risk management initiatives.