Information Security Policy

Chino Corporation (hereinafter referred to as "the Company") has established an "Information Security Policy" (hereinafter referred to as "this Policy") as the basic policy for the Company's efforts regarding information security, in order to always earn the trust of our customers, business partners, and society. The Company will comply with this Policy and the separately posted "Handling of Personal Information" (hereinafter referred to as "Privacy Policy").

I. Application and Scope

The "information assets" covered by this Policy include all information obtained or learned in the course of our business activities, as well as all information held by our company for business purposes.
All of our officers and employees involved in the handling and management of our Information Assets, as well as our business partners and their employees who handle our Information Assets, will comply with this Policy and the Privacy Policy.

II. Management System

Our company's information security management department will protect and appropriately manage our "information assets."
Additionally, by appointing an information management officer in each organization, we will promptly implement information security measures.
Through these measures, we will accurately grasp the information security situation throughout the company and take proactive measures to swiftly implement necessary measures.

III. Compliance with Laws and Regulations and Internal Regulations

We will establish regulations based on the relevant laws, this policy, and the privacy policy, and will thoroughly enforce compliance within the company. In addition to applying penalties to violations, we will prevent accidents by notifying employees in advance.

IV. Implementation of measures

In order to prevent accidents such as unauthorized intrusion, leakage, falsification, loss, destruction, and interference with the use of "information assets," the Company will implement appropriate organizational, physical, technical, personnel, and other safety management measures.
We also aim to improve the reliability of our company by implementing business continuity measures and disaster recovery measures to fundamentally support information security.

V. Education

Our company will continuously provide information security education and training to all officers, employees, and related parties to improve their information security literacy and to execution the proper management of "information assets."

VI. Management of business partners

When we outsource all or part of our operations, we thoroughly assess the suitability of the outsourcing partner and document in writing that they maintain a security level equivalent to our own. Furthermore, we conduct regular audits and reviews of the outsourcing partner to ensure that these security levels are properly maintained.

VII. Audits and Continual Improvement

Our company conducts regular and, as needed, internal information security audits to verify that laws, regulations, and operational procedure related to information security are being complied with and functioning effectively in the course of our business operations.
By regularly evaluating and reviewing the above initiatives, we will maintain and continuously improve information security.