Omron 2010 Annual Report Download - page 59

59
Corporate Governance, Compliance, and Risk Management
Risk Management
where labor standards and diversity are both respected
(there were 12 inquiries in total).
Clear rules of usage have been established for the inter-
nal whistle-blower hotline to ensure strict confidentiality
and make sure that these individuals are not treated unfair-
ly for having taken action. In addition, employees are
provided with a corporate ethics card and are made aware
of the existence of the hotline via the Company’s Intranet
system, during new employee training sessions, and at
other opportunities.
Omron will continue to keep employees informed about
the system and to implement measures to realize an effec-
tive system for responding to whistle-blowers’ reports.
Applying the PDCA cycle for constantly improving
information security management
Omron constantly endeavors to fortify its information secu-
rity following its basic policy of fulfilling its responsibility
to all stakeholders through the appropriate handling of infor-
mation received from business associates, personal
information, and its own company information.
In fiscal 2007, the Company formed the Information
Security Management Committee to fortify its integrated
management system for confidential information and per-
sonal information, and formulated management rules shaped
by the basic policy. The Company has since followed a
schedule in Japan of annual employee education sessions
and monitoring of workplace management conditions.
Moreover, the Company expanded its information secu-
rity activities to include the implementation of measures
in response to leak risk analysis for critical information and
the investigation of information security management con-
ditions at subcontractor sites. In addition, the Company
continuously reviews management rules based on changes
in the external environment and results of worksite moni-
toring, such as adding rules to minimize the risk of
information leaks via mobile phones.
In this way, the Company is conducting information secu-
rity management activities using the PDCA cycle group-wide
under its information security management promotion sys-
tem, centered on the Information Security Management
Committee.
In fiscal 2007, the Company also established common
rules for information security in its overseas operations
and continues to institute rules suited to specific condi-
tions in each overseas regional group. As of the end of
fiscal 2009, the majority of Omron’s overseas affiliated
companies were fully enforcing the rules.
Omron will continue to apply the PDCA cycle approach
group-wide in Japan to constantly improve its information
security management. Overseas, we will seek to estab-
lish rules at all affiliated companies, begin the provision of
information security education and also start conducting
risk analysis.
The Company established the Omron Crisis Management
Rules (established 1999, amended June 2009) to ensure
all employees can act promptly and accurately when a cri-
sis occurs to minimize damage, facilitate the continuity and
early restoration of business operations, and prevent recur-
rence. In fiscal 2009, the Company’s crisis simulation
exercises, which had previously been held at the Company,
were extended to affiliated companies in Japan.
In addition, the Company created the “Omron Group
Crisis Response (First Action) Manual” using information
accumulated from case studies and observations during
crisis-response exercises to provide guidelines for the oper-
ation of an emergency response headquarters when a crisis
event occurs.
Basic Policies Stipulated in Omron’s Crisis Management Rules
1. Place human life and personal safety at the top of the list of priorities.
2. Give high priority to legal/regulatory compliance and respect for social rules.
3. Minimize the negative impact of crises on customers and society.
4. Curtail the negative impact of crises on Omron’s business and strive to ensure smooth continuation and
quick restoration of business operations.
5. Take necessary measures in a sincere and consistent manner.
6. Disclose information appropriately and remain accountable.