FY2024: Conformity Confirmed in Our Information Security Management System (ISMS) Recertification Audit, Certification Renewed
In the May 2024 recertification audit of the Information Security Management System (ISMS) certification we obtained in 2022, our conformity was confirmed and the renewal of our certification registration was approved.
ISMS certification has a set period of validity. To maintain it, a company must undergo regular recertification audits and have it confirmed that its information security management system is being properly operated and that its continual improvement activities meet the standard. In this recertification audit, our information security management system was confirmed to conform to the requirements, and the renewal of our certification registration was approved.
ISMS is a management system for protecting the confidentiality, integrity, and availability of information, and an important framework for safeguarding a company's information assets. We have put in place a system that keeps our clients' valuable information safe and continually reduces security risks.
Strengthening Information Security
To improve security further, we have been driving the following initiatives since 2024.
Introducing an Access Rights Management System
We have introduced our own system that centrally manages which tools each staff member has access to, with what permissions, and what approval process is required. With this system, permission settings for some tools are automated, enabling efficient and strict access management. By making the process of granting, changing, and removing permissions visible, we are strengthening our security governance.
Adopting an Allowlist Approach
We strictly manage the software and web tools used in our work with an allowlist approach, and make sure that only approved tools are used. In particular, to minimize the risk of information leaks that comes with using AI services and new tools, we carry out careful evaluation and risk assessment before introducing them.
Looking Ahead
Taking this renewal of our certification as an opportunity, we will keep working to continually improve our information security management system and continue to provide our clients with safe and highly reliable services.
If you are considering strengthening information security in system development or improving your development setup, please feel free to contact us.