Information Security Policy

This English version is a translation provided for reference only. The Japanese original is the official version and prevails in the event of any discrepancy.

Information Security Policy

Basic Philosophy

FID Ltd. (the "Company") constantly pursues the cutting edge in IT and keeps creating new value. As a result, the Company conducts its business under the philosophy of delivering the best services and contributing to innovation and higher profitability in its customers' businesses.
The information assets handled in the course of the Company's business, including customer information, are extremely important as the foundation of the Company's management.
Everyone who handles information assets, including officers and employees, recognizes the importance of protecting information assets from risks such as leakage, damage and loss, complies with this policy, and carries out activities to maintain information security, namely the confidentiality, integrity and availability of information assets.

Basic Policy

1. To protect information assets, we establish an information security policy and conduct our work in accordance with it, and we comply with laws, regulations and other norms related to information security, as well as our contractual obligations to customers.
2. We define clear criteria for analyzing and evaluating risks such as leakage, damage and loss to information assets, establish a systematic risk assessment method, and conduct risk assessments regularly. Based on the results, we implement necessary and appropriate security measures.
3. We establish an information security structure led by the responsible officer and clarify authority and responsibility for information security. We also provide regular education, training and awareness activities so that all employees recognize the importance of information security and handle information assets appropriately.
4. We regularly inspect and audit compliance with the information security policy and the handling of information assets, and promptly take corrective action on any deficiencies or areas for improvement that are found.
5. We take appropriate action against information security events and incidents, and establish in advance response procedures to minimize damage should they occur. In an emergency, we respond promptly and take appropriate corrective action. In particular, for incidents that could interrupt business, we establish a management framework and review it regularly to ensure the continuity of the Company's business.
6. We establish and operate an information security management system with objectives for realizing our basic philosophy, and review and improve it continuously.

Established: June 10, 2019
FID Ltd. Seisho Wada, Representative Director