Because our response to risk could profoundly affect the MinebeaMitsumi Group's business fundamentals, we believe that risk management is vital to the management of the company. We established the MinebeaMitsumi Group Basic Rules for Risk Management which define preventive measures we should have in place, our response in crisis situations, and the type of system the group should put in place.
Risk Management System
The President and Chief Executive Officer of the MinebeaMitsumi Group has final responsibility for risk management, with major decisions regarding risk management being made by the Risk Management Committee. As a precautionary measure, MinebeaMitsumi attempts to predict and classify tangible risks in advance, and remains vigilant against such risks. In the unlikely event that an incident occurs, a management headquarters and local countermeasures office will be established according to the severity category of the circumstances as defined in the MinebeaMitsumi Group Basic Rules for Risk Management to respond rapidly and effectively to the situation. Further, MinebeaMitsumi has established a system under which, depending on the nature of the risk, a supervisory division can be appointed to handle a situation to draft and implement risk prevention measures.
Information Security Structure
The MinebeaMitsumi Group believes that protecting information assets is essential for building a relationship of trust. We have therefore established the Information Security Basic Policy, which we thoroughly implement.
We have also established an Information Security Committee, while organizing a promotion structure to implement measures in each country.
Information Security Training
To improve employee awareness of information security, the MinebeaMitsumi Group conducts information security training. Information security briefings are held annually, and tutorials are conducted in addition to training for new and experienced employees when they enter the company. In FY2018, a total of 20,692 employees attended information security briefings, including temporary employees and subcontracted employees.
Moving forward, we will continue to use our education systems to confirm prohibited actions and required actions regarding information security, share points that often lead to security incidents, and take other initiatives to raise employee awareness.
Initiatives to Protect Personal Information
Personal information retained by the MinebeaMitsumi Group is managed in accordance with our Personal Information Protection Policy. The purposes for which this information is utilized have also been clearly defined, and we strictly adhere to the parameters for scope of information use.
In the event of a major disaster, influenza, act of terrorism or other emergency, we believe that our social responsibility includes confirming the safety of our employees and their families, as well as ensuring that, as a manufacturer of products with world-leading market shares, we can continually supply our customers and minimize the impact to our business. For that reason, we have formulated business continuity plans (BCP) for major business sites in and outside Japan and are implementing preparation and training drills.
In terms of specific activities, BCP encompass the creation of emergency response manuals, earthquake strengthening of facilities, storage of food and drinking water, establishment of an internal fire brigade, disaster drills, and introduction of a personnel safety confirmation system, among other measures. BCP drills are conducted at the Karuizawa Plant three times annually in anticipation of an earthquake.
Assessments of BCPs at Chitose Plant and Cebu Plant were conducted by specialized agencies in FY2018. The assessments confirmed that the Chitose Plant BCP, premised on an earthquake, is effectively functioning and that a basic BCP was established at the Cebu Plant as well.
In addition, several divisions in Thailand acquired ISO 22301, an international standard for business continuity management. They also formulated plans for BCP drills and conducted training drills in anticipation of flooding while implementing the PDCA cycle to conduct ongoing measures and make improvements.
Future Issues and Goals
Moving forward, we will establish risk management structures responsive to the various risks at key bases worldwide and take measures to ensure that those structures become firmly rooted.