Mazda 2013 Annual Report Download - page 28

Business Management System
Risk Management
Mazda follows the Basic Policy on Risk Management, Risk
Management Regulations, and other related internal regulations,
and individual business risks are managed by the department in
charge of that business area while companywide risks are
appropriately handled by departments that carry out business on
a companywide basis. Mazda continues to strengthen its risk
management, following the PDCA cycle. During emergencies, such
as natural disasters or situations that bring forth serious
managerial consequences, Mazda takes appropriate measures in
reference to its internal regulations, including the establishment
of an emergency response taskforce when necessary.
Moreover, risk management is further enhanced through the
establishment of key agenda items in the Risk Compliance
Committee and confirmation/evaluation of the risk management
status in each department.
In the March 2013 fiscal year, the Emergency Management
Regulations was consolidated into the Risk Management
Regulations and subsequently revised. Mazda continuously
identifies and reduces the various risks.
In the event of incidents that fall outside the scope of existing risk
management organizations and require a coordinated interdepartmental
response, the director in charge of risk management will consult with the
president, establish an emergency response taskforce, and appoint a
general manager of this taskforce.
Response to Accidents and Other Emergencies
Mazda has been systematically undertaking preparatory
measures for major earthquakes since the March 2004 fiscal year.
Examples of such measures include quake-proofing buildings and
facilities, maintaining emergency-contact networks, and carrying
out evacuation drills.
Mazda has taken to heart the lessons learned from the Great
East Japan Earthquake, and reinformed the employees of its
Disaster Countermeasures Manual as well as confirming and
reviewing the precautions and early responses in the workplace.
Steady efforts to enhance various aspects of emergency
readiness will continue.
Basic Policy on Intellectual Property
Mazda's overall vision for intellectual property is to use
intellectual property as a management resource in support of its
business management and enterprise activities, based on respect
for its own and others’ intellectual property. Based on this vision,
Mazda has established an Intellectual Property Committee,
comprising division general managers from related divisions and
chaired by an executive officer responsible for intellectual
property issues. Also, the invention incentive system is increasing
motivation for inventions among employees working at the
forefront of research and development.
Information Security
Personal information and other important information are
appropriately managed and protected based on the established
information management policies and internal regulations, so as to
ensure information security. To raise employees’ awareness about
information security, Mazda requires its employees to execute
training on the management of confidential information, protection
of personal information, and IT security upon newly joining the
Company. Management of confidential information is covered in
the introduction program, while e-learning is used for personal
information protection and IT security training. Other continuous
education efforts are also available, including an Intranet site
dedicated to information and knowledge on information security.
For companies in the Mazda Group, Mazda provides guidelines and
educational tools regarding information security, realizing a group-
wide effort to ensure information security.
IT Security Management Rules
The IT security policy based on the BS 7799 (ISO 17799)*
framework has been established as IT security management rules,
which determine which security control mechanisms should be
incorporated into the IT system. The implementation of such
mechanisms is confirmed on a regular or random basis. For
particularly important information, security measures include
managing access according individual IDs and keeping access logs.
* Standards on information security management established by the British Standards
Institution (BSI).
Compliance
At Mazda the concept of compliance applies not only to laws and
regulations, but also includes adherence to other rules such as
internal guidelines and societal norms and expectations. Business
operations are conducted in accordance with the Mazda
Corporate Ethics Code of Conduct to ensure fair and honest
practice. This also applies overseas; Mazda not only complies with
international regulations and the laws of each country and region,
but also respects local history, culture, and customs.
Risk Management Structure
in Normal Times
Emergency Risk
Management Structure
Director in charge of Risk Management
Risk Compliance Committee
Emergency response taskforce
Representative Director and President Representative Director and President
Departments
within Mazda
Mazda Group
Companies
Departments
within Mazda
Mazda Group
Companies
Compliance Promotion System
Risk Compliance Committee
Office of General & Legal Affairs
Mazda Global Hotline
Representative Director and President and CEO
Departments within Mazda
(Executive Officers/Division General Managers/
Department General Managers = Persons in charge of compliance)
Mazda Group
Companies
<Review board>
Liaison
Reporting Deliberation of
handling
Recommendation/
advice
Mazda Annual Report 2013
26