Sharing of Protective Measures

• The department(s) and person(s) in charge who will operate or carry out the implemented protective measures shall be clearly identified.

※ Departments that operate or carry out protective measures (examples)

• Infrastructure operation department: security configuration of servers and network equipment, account management/privilege management for infrastructure operators, etc.

• Development department: development security, source code security, access to the development environment, etc.

• Personal information handling department: privilege management for handlers (application programs), destruction of personal information, encryption when stored on PCs, etc.

• Information security operation department: operation of access control equipment, security monitoring, etc.

• Human resources department: security management of departing personnel, etc.

• To internalize the information security and personal information protection management system, the relevant content shall be shared with, or provided as training to, the department(s) and person(s) in charge who will operate or carry out the implemented protective measures.

  • Content to share: enactment/amendment of information security and personal information protection policies and implementation documents, implementation plans and implementation results of information security and personal information protection measures, new introduction and improvement of security systems, etc.
  • Recipients of sharing: the department(s) and person(s) in charge who will actually operate or carry out the relevant policies/guidelines and protective measures
  • Methods of sharing: bulletin board and email notices (for simple issues), meetings, briefing sessions, training, etc.