Information Security Policy

1. Fundamental Principles

As a team of specialists in Security, AI, and Digital Identity, we are committed to appropriately protecting all information assets we handle, in order to maintain the trust placed in us by our clients and society. Information security is the foundation of our business operations, and all executives, employees, and associates are united in this commitment.

2. Scope

This policy applies to all information assets handled in our business activities. This includes information entrusted to us by clients, internal business information, personal information of executives and employees, and the information systems and communication networks we utilize. This policy applies to all executives, employees, and contractors involved in our operations.

3. Compliance with Laws and Regulations

We comply with all applicable laws, regulations, contractual obligations, and industry standards related to information security. We reference international standards such as ISO/IEC 27001 and strive for continuous improvement.

4. Information Security Management Structure

The President & CEO serves as the chief information security officer, and we maintain an organizational structure for information security management. Responsibilities and authorities related to information security are clearly defined, and appropriate management is conducted across the entire organization.

5. Risk Assessment and Countermeasures

We regularly assess risks to our information assets and implement appropriate technical and organizational countermeasures against identified risks. Risk assessments are reviewed and countermeasures are continuously improved in response to changes in the business environment and threat landscape.

6. Incident Response

In the event of an information security incident, we respond promptly to contain damage and restore operations. We analyze the root causes of incidents and develop and implement measures to prevent recurrence. Reports are made to relevant parties and authorities as necessary.

7. Education and Awareness

We conduct regular information security education and awareness activities for all executives and employees. We aim to raise security awareness and ensure adherence to appropriate practices throughout the organization.

8. Management of Contractors

We require our contractors to adhere to information management practices consistent with this policy and exercise appropriate oversight. Confidentiality obligations and information security requirements are clearly defined in all outsourcing agreements.

9. Continuous Improvement

We regularly evaluate and review the effectiveness of our information security management and pursue continuous improvement. This policy and related regulations are revised as needed in response to changes in the social environment, technological trends, and applicable laws.

10. Contact

For inquiries regarding this policy, please contact us at:

Concusto Co., Ltd.
Mitsuhashi Bldg. 3F, 1-3-3 Kita-Aoyama, Minato-ku, Tokyo 107-0061, Japan
Email: contact@concusto.com