Information Security Policy

Kou System Support (the “Company”) is committed to contributing to the development of society through the provision of system support and IT-related services. We recognize that ensuring the secure management of information assets handled by the Company and information entrusted to us by customers is one of our most important management responsibilities.

Part 1: Basic Information Security Policy

We declare that all officers and employees will comply with this policy and work to maintain and improve information security.

1. Definition of information security

Information security means maintaining and continuously ensuring the confidentiality, integrity, and availability of information assets.

2. Scope

This policy applies to all officers and employees involved in the Company’s business, including regular employees, contract employees, temporary staff, and employees of partner companies. It covers all information assets managed by the Company.

3. Organizational structure

We will establish an information security management structure led by the representative. We will appoint an information security officer (CISO) to promote appropriate information management and the implementation of security measures.

4. Compliance with laws and standards

We will comply with laws and regulations related to information security, government guidelines, other applicable standards, and requirements under contracts with customers.

5. Management of information assets

We will assess and classify the importance of information assets and implement appropriate protection measures. We will manage them rigorously to prevent unauthorized access, loss, destruction, alteration, and leakage.

6. Education and training

We will provide regular education and training to all employees to improve awareness of information security.

7. Incident response

If an incident occurs, we will promptly take emergency measures, investigate the cause, and implement measures to prevent recurrence.

Part 2: Privacy Policy (Personal Information Protection Policy)

We regard the protection of personal information as an important social responsibility and establish, implement, and maintain the following privacy policy.

1. Collection of personal information

We collect personal information by lawful and fair means. When collecting it, we will announce the purpose of use in advance or notify the individual concerned.

2. Purposes of use

We use collected personal information only within the scope of the following purposes:

• Providing and operating system support and IT services
• Responding to inquiries and sending materials
• Performing contracts and communicating for business purposes
• Improving our services and providing information about new services

3. Provision to third parties

Except where required by law, we will not provide personal information to a third party without obtaining the individual’s prior consent.

4. Security measures

We will take necessary and appropriate measures to prevent leakage, loss, or damage of personal information and to ensure its secure management. Specific measures will follow the basic information security policy in Part 1.

5. Disclosure, correction, and suspension of use

If an individual requests disclosure, correction, suspension of use, deletion, or other action concerning their personal information, we will respond promptly.

6. Contact

For inquiries or consultations regarding our handling of personal information, please contact the following desk.