We committed to the thorough implementation of these risks under the following organization structure.
We believe that implementing risk management will ensure the continuity and stable development of our business. Being fully aware of our public mission and social responsibility in conducting asset management, we carry out necessary risk management, and we also conduct necessary risk management of the investment corporations to strive to protect investors and operate the investment management business appropriately. We conduct sound and appropriate business management, based on our management policy and strategic goals. With regard to the risks arising as part of that management, we have established an income and risk management system in line with the management policies of each of the investment corporations and based on the strategic goals, and we manage the system so that risk is appropriately controlled.
We have established the Internal Audit Office, which is independent of any department, to conduct audits covering the operations of all departments. Each department is audited once every three years, based on the internal audit plan established for each fiscal year. We believe that internal audits contribute to the achievement of management goals, not only by finding and pointing out problems in business operations, including compliance, but also by evaluating the internal control systems of each department, and proposing methods of improvement, etc.
Details about the implementation of internal audits based on the Internal Audit Rules are specified in the detailed rules on internal audits. When the audited department receives any instruction or proposal for improvement through the internal audit, it prepares an improvement response plan, implements the improvement measures, and reports the results to the Internal Audit Office.
After the completion of the internal audit, the Internal Audit Office prepares an Internal Audit Report to report to the President, in addition to reporting to the Board of Directors at least once a year, in principle.
We are also regularly audited by its parent company (Implementation year: 2023), as well as being evaluated by external experts as necessary.
The Company has established the Basic Rules on Information Security to ensure the appropriate and rigorous protection of all assets held by the Company.
Measures are taken for the following items based on the Basic Policies.
There is an increased risk of information leakage by "targeted (hoax) e-mail" attacks aimed at organizations such as corporations and government agencies. Since attack techniques are evolving day by day and the ultimate best defense to prevent damage is raising awareness and appropriate action of all employees as e-mail recipients, we implement training, etc. using videos on specific cases or similar means, in addition to regular e-mail attack drills.