1. Purpose
Ginco Inc. (the “Company”) believes that its mission is to contribute to society through solutions for data management and utilization using new technologies. In line with this, the Company fully recognizes the importance of System Risk Management, which aims for the safe and stable operation of its systems in order to fulfill its responsibility to secure the trust of its customers and society as a whole, and strive to strengthen. This Basic Policy establishes the fundamental principles for the Company's System Risk Management framework.
2. Definitions
(1) System Risk
The risk of loss incurred by users or the Company due to system defects, such as computer system downtime or malfunctions, or the risk of loss incurred by users or the Company due to the unauthorized use of computers.
(2) System Failures, etc.
System failures or cybersecurity incidents.
3. Scope of Application
This Basic Policy applies to all information systems and information assets related to the Company's services and products.
4. System Risk Management Framework
The Board of Directors fully recognizes the importance of System Risk Management and will establish an appropriate System Risk Management framework.
(1) Appoint the System Risk Management Overall Manager and establish the System Risk Management Division.
(2) Establish internal regulations necessary for System Risk Management and ensure all officers and employees are fully aware of them.
(3). Establish the "Information Security and System Risk Management Committee" for the purpose of deliberation and reporting on the System Risk Management status, thereby aiming to improve the effectiveness and efficacy of control measures.
5. Continuous Review
In light of changes in the environment surrounding the Company, such as the development of information technology and the sophistication of cyber threats, the need for reviewing this Basic Policy and subordinate management regulations will be examined periodically and as necessary.