 |
|
Organizational security measures |
 |
|
|
● |
The Society maintains organizational structures for implementing security measures. |
|
|
● |
The Society handles personal data in accordance with rules on handling personal data. |
|
|
● |
The Society maintains means for checking on the state of handling of personal data. |
|
|
● |
The Society maintains structures for responding swiftly and appropriately to actual or suspected leaks or other incidents. |
|
|
● |
The Society ascertains the state of handling of personal data and evaluates, revises, and improves security measures accordingly. |
|
 |
|
Human security measures |
 |
|
|
● |
The Society ensures that its officers and employees understand how to handle personal data appropriately and provides appropriate training. |
|
 |
|
Physical security measures |
 |
|
|
● |
The Society appropriately manages the zones in which personal data is handled. |
|
|
● |
The Society employs appropriate management to prevent cases such as theft of devices, digital media, etc. |
|
|
● |
The Society implements safety procedures to prevent cases such as leakage of personal data when transporting digital media, etc. |
|
|
● |
The Society deletes personal data and disposes of devices, digital media, etc. through unrecoverable methods. |
|
 |
|
Technical security measures |
 |
|
|
● |
The Society implements appropriate access controls. |
|
|
● |
The Society identifies and authenticates those accessing personal data. |
|
|
● |
The Society adopts and appropriately operates systems to prevent cases such as unauthorized access from the outs |
|
|
● |
The Society adopts and appropriately implements measures to prevent cases such as leakage of personal data associated with the use of information systems |
|
 |
|
Ascertaining external conditions |
 |
|
|
● |
For the handling of personal data outside Japan, the Society identifies systems and other provisions related to the protection of personal information in the countries in question and takes necessary measures to ensure secure handling of personal data. |
 |