Basic Information Security Policy

Each company of the TATEYAMA KAGAKU GROUP (hereinafter referred to as "the Company") aims to contribute to its customers and the development of social life through its products and services. Based on the "Cybersecurity Management Guidelines" of the Ministry of Economy, Trade and Industry, the Company will develop an information security framework and effectively implement measures to protect its information assets, including personal information.

1. The Company will define responsibilities and authority for information security and protect its information assets as a unified organization.
2. The Company will establish operational rules and technical measures, and conduct risk assessments and countermeasures, to protect its information assets from all threats, including unauthorized access, negligence, accidents, disasters, and crime.
3. The Company will comply with laws and regulations, contractual requirements, and other social norms concerning information security.
4. The Company will continuously provide the education necessary to ensure information security.
5. In the event of an information security problem, the relevant parties (CISO/CSIRT) will promptly share information and take measures to minimize damage.
6. The Company will evaluate internal and external incident information, take corrective actions as necessary, and continuously improve its information security framework.

Established on July 1, 2016
Chair of the Cybersecurity Committee, TATEYAMA KAGAKU GROUP:
Seiki Mizuguchi