Ricoh 2013 Annual Report Download - page 38

Download and view the complete annual report

Please find page 38 of the 2013 Ricoh annual report below. You can navigate through the pages in the report by either clicking on the pages listed below, or by using the keyword search tool below to find specific information within the annual report.

Page out of 98

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98

Ricoh Group Sustainability Report 201337
•฀฀The฀Ricoh฀Group’s฀information฀security฀framework
฀WEB฀1฀List of Ricoh ISMS registration scope
:
www.bsigroup.jp/27001/ricoh
•฀฀ISMS฀certication฀฀
mark
•฀ISMS฀certicate
ISO27001/IS85241
P
D
C
A
Realization of a secure society
Creating information value
Delivery of value to customers
Delivery of value to customers
Information
protection
Information
protection
Information
use
Information
use
Company
practices
Participation
by all
employees
Daily
management
and continual
improvement
Information Security
Information security management
To validate the trust that society places in us, the Ricoh
Group involves all its employees in continuous
improvement of information security management.
Our aim is to balance utility and protection, simplifying
the secure use of information by people with
legitimate access rights — including business partners
— while preventing unauthorized access and leaks.
Reinforcing our information security culture
The primary goal of the Ricoh Group’s Information
Security Management System (ISMS) is to have all
employees engage in proactive, security-conscious
behavior as a matter of course, beyond simply
following legal requirements or rules. We call this
our “information security culture,” and reinforce it
in three ways: (1) participation by all employees, (2)
daily management and continuous improvement,
and฀(3)฀company฀practices.
In particular, daily internal use of our products
and services becomes in effect a continuous
excercise in solving problems related to information
security, and allows us to confirm the results of our
efforts. The processes we achieve in this way are
then passed on to our customers.
ISMS Certification Status
The Ricoh Group obtained uniform ISMS
certification (ISO27001) in December 2004. Since
then, we have maintained our certification through
annual inspections by external organizations and
recertification inspections every three years.
฀ As฀of฀March฀2013,฀a฀total฀of฀70฀companies฀
—฀23฀within฀Japan฀and฀47฀overseas฀—฀have฀
received ISMS certification.
WEB฀1
Information security incidents
In฀the฀fiscal฀year฀ending฀March฀2013,฀there฀were฀no฀
major incidents that required disclosures to external
inspection or audit organizations.
ISO27001/IS85241
A brand trusted by the information society
In an increasingly complex digital landscape, a crucial factor of Ricoh Group services is to
provide tools that our customers can use with complete confidence when it comes to the
security of their information.
All our employees are expected to include security in everything they do and to continuously
improve security management at their daily worksites. This attitude is ultimately reflected in
the security the Ricoh Group provides to customers. The information security built into our
products, including MFPs, protects digital and paper-based documents, helping to safeguard
the data of our customers.