Information Security Policy

CMC has established an Information Security Policy that places the utmost priority on earning the trust and satisfaction of our clients. To this end, we have established a robust system for maintaining confidentiality.

Information Security Policy

CMC defines itself as a "Creative Multivalued Coordinator", providing high value-added information to our clients and onwards to the end users of our clients’ products and services. Being a company that handles information, information security is one of our highest priority management issues. Information assets are a vital business resource, and to “achieve sustainability of information value” protecting them from all threats is essential for both enterprise growth and for fulfilling our responsibilities as a good corporate citizen. Our determination to achieve these goals is the foundation for our Information Security Policy.

1. We will set objectives for company-wide initiatives to prevent unauthorized access to, or loss, leakage, falsification, or destruction of information assets to protect both our clients’ and CMC's vital business resources.
2. We will comply with information security laws, as well as all business and contractual requirements.
3. We will identify information security stakeholders and strive to satisfy their requirements.
4. We will establish internal information security rules and policies and work to ensure compliance by providing training to executives, employees, and other parties with which CMC has business dealings on an ongoing basis.
5. In the event that there is a breach of the Information Security Policy or related regulations, the offender will be punished in accordance with employment regulations.
6. If information assets are found to contain threats, we will take immediate action to identify the reasons why, and work to minimize any damage and rectify the situation.
7. We will conduct risk assessment on an ongoing basis to respond to changes in the business environment.
8. We will establish and maintain an organization to manage the information security on an ongoing basis with the objective (tasked with) of protecting information assets.

Yukiyasu Sasa

President and CEO
CMC Corporation

Established April 1, 2005
Updated October 16, 2023