Information Security Policy

１.　Policy on Information Security Management System

Our company, Jupiter Corporation, regards all know-how, products, and information necessary for development, including those provided by clients and partner companies, that arise in all processes related to the planning, development, and sales of our products (software) as valuable information assets.
We consider information assets to have freshness and be filled with treasures meant to be discovered.
Implementing appropriate security measures to protect these information assets from various threats, such as loss, theft, or misuse, is fundamental to maintaining the trust of our clients and partner companies. It also serves as the foundation for actively realizing our corporate philosophy of "Creating a world with smiles. Let’s play! Let’s smile!" To achieve this, we emphasize the importance of acting with a high level of awareness and respect for security, alongside specific physical, environmental, and technical security measures.
With this in mind, we establish this "Information Security Basic Policy" as a guideline for implementing proper protection measures for the assets owned by our company.

２.　Policy on information security

1) Definition

Information security is the process of ensuring and maintaining confidentiality, integrity and availability.

  1. 1. Confidentiality: Preventing access by unauthorized personnel.
  2. 2. Integrity: Protecting information assets to prevent falsification or destruction due to intentional actions, negligence or disasters
  3. 3. Availability: Preventing system shutdowns due to intentional actions, negligence or disasters, to enable access to information assets when needed

2) Applicability

Jupiter Corporation’s information security management shall apply to the organizations, work processes and network configurations below.

1. Organizations: Jupiter Corporation
Jupiter Corporation
2. Work processes
Planning, development and sale of products (software).

3) Steps required

  1. 1. Ensuring and maintaining the basic requirements of information security: confidentiality, integrity and availability
  2. 2. Ensuring there no violations in business requirements, legal or regulatory requirements, or contractual security obligations
  3. 3. Creating preventive and recovery procedures to prevent business activities being interrupted by major failures or disasters; reviewing these procedures periodically
  4. 4. Setting up the Information Security Committee, an internal organization used to oversee information security throughout the Company; implementing, applying, maintaining and promoting security measures for information assets
  5. 5. Carrying out periodic information security education and training activities for all applicable employees
  6. 6. Reporting and investigating all information security violations and suspected weak areas
  7. 7. Setting standards for risk assessments used to implement security measures appropriate for business administration (up to the acceptable level); systematic risk assessments

4) Responsibilities and obligations; disciplinary regulations

  1. 1. The President shall hold the responsibility for information security. To fulfill this responsibility, the President must provide the information required by the applicable employees, and play a leadership role in promoting information security management.
  2. 2. To protect the Company’s interests and increase customer satisfaction, the applicable employees must sustain and comply with the Policy when handling information resources. Employees who violate the Policy shall be punished as specified in the Office Regulations.

5) Periodic review

Information security management systems must be periodically reviewed to adapt to changes in the environment, and security measures appropriately maintained and improved.

Jupiter Corporation
Hirofumi Murakami
Chief Operating Officer