Information Security

Basic Approach to Information Security

Current information networks do not remain only within the Company, but are broadly linked with external systems and supply chains. In such an environment, an information security incident that occurs within the Company may affect society, and companies are also increasingly likely to be affected by incidents occurring at other companies. For this reason, each company connected to information networks is required to manage its own information security responsibly and prevent incidents before they occur. Based on the Code of Conduct, which forms the basis of corporate behavior, the Mitsuboshi Belting Group recognizes the importance of information security management as a foundation that supports business activities.
In addition, as a concrete expression of the concept of the Code of Conduct, the Group has established an Information Security Policy and is working to appropriately manage information assets and maintain and improve the level of information security. For details, please refer to the “Information Security Policy.”

Promotion System and Governance

Based on the Information Security Policy, the Mitsuboshi Belting Group established the Information Security Committee in 2021 as a system to promote information security management. The Information Security Committee is chaired by a director designated by the President, and consists of persons responsible for business divisions and administrative divisions designated by the chairperson. This Committee organizes issues related to information security that should be addressed by the Group, clarifies the departments responsible for response, confirms the status of initiatives, and gives instructions for improvement. The content of these activities is reported to the President and the Board of Directors twice a year.

Risk Management

Based on the Information Security Policy, the Mitsuboshi Belting Group identifies information assets and conducts risk assessments for the purpose of appropriately managing information assets. In each department, based on the content and importance of the information assets handled, the department organizes assumed risks and considers and implements response measures according to priority. Through these initiatives, the Group aims to reduce information security risks and maintain reliability in business activities. These initiatives are confirmed and shared at the Information Security Committee.

Main Initiatives (ISMS and External Certification)

In order to meet the requirements of car manufacturers, which are important customers, the Mitsuboshi Belting Group aims to build an information security management system (ISMS) at all sites, mainly through the Information Security Committee.
In FY2021, the Information Security Committee established an ISMS aligned with ISO/IEC 27001 (an international standard for information security management systems), covering the Kobe Head Office and the Germany site. In connection with this, after developing the Information Security Policy and regulations and procedures, the Group appointed management personnel for each department and conducted education related to information security. Thereafter, the ISMS framework was gradually deployed within the Group, and in FY2024, ISMS was introduced at all domestic sites of the Mitsuboshi Belting Group. In FY2025, activities such as information asset management and risk response based on ISMS were promoted, mainly by 52 department information security managers. In FY2026 as well, the Group has set as activity targets the planned implementation of information asset management, risk assessment, education, and internal audits in each department.
In FY2023, the Germany site obtained TISAX certification (an information security standard of the German Association of the Automotive Industry), and in FY2025, the China / Shanghai site obtained certification.
In addition, for business partners handling products for automobiles, the Group confirms the status of initiatives related to information security and encourages improvement as necessary.

Information Security Education and Internal Audits

The Mitsuboshi Belting Group continuously implements education related to information security for the purpose of making the Information Security Policy known and thoroughly established.
In FY2025, training assuming targeted email attacks was conducted twice during the year, with the aim of improving each employee’s risk awareness and ability to respond appropriately. Internal audits related to information security are conducted with respect to the operation status of ISMS, and the Group confirms compliance with regulations and matters requiring improvement. In FY2025, there were no nonconformities, and observation items are also continuously followed up and improvements are being advanced.
No major information security incidents occurred in FY2025.

Future Plans and Continuous Improvement

Based on the Information Security Policy, the Mitsuboshi Belting Group is working on continuous improvement of information security management. Going forward, the Group plans to obtain TISAX certification at Mitsuboshi Belting Giken in FY2026, and at the Kobe Head Office, China / Suzhou site, and Thailand site in FY2027. The Group will continue to enhance the information security management system across the entire Group.