Mazda 2011 Annual Report Download - page 35

Compliance Risk Management
Mazda does not view compliance as simply complying with
legal regulations; we believe that internal guidelines and social
norms (society’s expectations and requests) apply as well.
These ideas are specified in the Mazda Corporate Ethics Code
of Conduct, which is the benchmark for ensuring that our
business operations are fair and honest. Overseas, Mazda’s
compliance guidelines require that employees not only follow
international rules and all applicable laws, but also that they
respect local history, culture, and customs.
Mazda Global Hotline
In 1999, Mazda established the Ethics Advisory Office to handle
employee inquiries about compliance and conduct investigations
on ethical matters. In September 2007, the scope of the office
was expanded to include domestic and overseas Group
companies, and it was renamed the Mazda Global Hotline as a
contact point for receiving information. The Mazda Corporate
Ethics Code of Conduct states that “Persons who report
incidences of violation of the law and persons who cooperate in
investigations of alleged violations shall not be subjected to
retribution or disadvantageous treatment.”
To ensure that all employees are aware of this hotline, we
have distributed cards with the contact information to all parent
company employees, and introduced the hotline to Group
companies in Japan and overseas via the Company Intranet.
Mazda Risk Management is committed to taking appropriate
measures to minimize various internal and external risks so as
to ensure the continuous, stable progress of business activities.
Risk Management Framework
Based on the recognition that “all Mazda directors and employees
are expected to take the initiative for risk management,” the
Company manages potential risks in reference to the Basic Risk
Management Policy, Risk Management Regulations, and other
related internal regulations. Individual business risks are
managed by the department in charge of that business area,
while departments that carry out business on a companywide
basis are responsible for carrying out appropriate management
of respective companywide risks according to the risk level.
When incidents that fall outside the scope of existing risk management organizations
and require a coordinated interdepartmental response occur, the Officer in charge of risk
management will consult with the president, establish an emergency response office,
and appoint a general manager of this office.
Information Security
Mazda strives to ensure information security by appropriately
managing and protecting personal information and other
important information. The general manager of each Division is
responsible for the appropriate management of the information
based on the information management policies and rules
formulated by the department responsible for centralized
management of information handled throughout the Company.
IT Security Management Rules
Mazda has IT security management rules in place. The Company
works to ensure information security Group-wide by providing
Group companies with guidelines for implementing information
security and support for strengthening management systems.
Standard Risk
Management Structure
Emergency Risk
Management Structure
Representative Director and
President
Emergency Response Office
The Officer in charge of
Risk Management
Risk Compliance
Committee
Representative Director
and President
Departments
within Mazda
Group
Companies
Departments
within Mazda
Group
Companies
Workflow of the Mazda Global Hotline
Report
Report
In principle,
real name is used
Real name /
pseudonym
Report
Response
(where
notification is
possible)
Response
(where
notification is
possible)
Instruction
Whistleblower
Mazda Global Hotline
In-house contact point
Department targeted for
investigation
Auditor
Compliance Administration
Department
Mazda Global Hotline
Outside contact point
(attorney’s office)
Representative Director and
President
Other senior management
Notification
Mazda Annual Report 201 1 33