P.29 Information Security Initiatives

29 Information Security Initiatives Due to the nature of our business, we handle confidential and personal information for many client companies. We recognize strengthening information management as one of our key management issues. We continuously strengthen and improve our information security system based on lessons learned from past personal information leakage incidents to ensure confidentiality. Basic Policy and Promotion Structure We have acquired PrivacyMark and ISO 27001 certifications and thoroughly comply with laws and regulations regarding personal information protection. We have built an information security management system based on ISMS standards and continuously conduct internal education and training for officers and employees to improve their awareness and quality. In addition, we have established a system for strict information management based on regulations concerning the management of insider information and the prevention of insider trading. Information Security Measures We manage servers in a distributed manner across external cloud data centers, enabling backups and rapid recovery. To prevent failures, we use system redundancy and load balancers while regularly taking measures against unauthorized access and conducting vulnerability assessments. By maintaining a highly secure hardware and software environment, we ensure stable services while protecting important information entrusted to us by customers. Preventive & Recurrence Measures We take past personal information leaks seriously and implemented preventive measures based on thorough fact-finding and root cause analysis. Beyond one-off responses, we continuously improve our practices in line with standards such as ISMS. We strengthen organization-wide governance through legal compliance, internal regulations, and ongoing education and training. By thoroughly implementing recurrence prevention measures company-wide, we strive to restore and maintain stakeholder trust. ISO/IEC 27001 (ISMS) Certification Since 2008, in light of the growing need to protect confidential information and the nature of our business, which involves handling sensitive information of listed companies and personal information, we have maintained PrivacyMark certification and invested in information security. In recent years, information security threats, including data leaks and unauthorized access, have been increasing worldwide. To ensure an even higher level of protection, we obtained certification under the standard below. [Certification Overview] Registered Organization: WILLs Inc. Scope: Operation of IR-navi and Premium Yutai Club, capital market research and consulting, and planning/production of communication tools. Standard: ISO/IEC 27001:2022 Registration Number: 12793 Initial Registration Date: September 11, 2018 Certification Body: Intertek Certification Japan Ltd. Accreditation Body: UKAS (United Kingdom Accreditation Service) ISO/IEC 27001 (ISMS) certification PrivacyMark