|
 |
|
Information Security Management |
|
|
As an enterprise promoting the network society,
Anritsu puts a high priority on information security issues, and is
strengthening its information management to be a reliable company. |
|
|
|
Information Security Management
Activities |
|
Anritsu's company philosophy of "contributing to
create an affluent ubiquitous network society" acknowledges that
information security is a key for consolidating trust among stakeholders
such as shareholders, customers, employees, and local communities. Even
a momentary lapse in this network could have far-reaching impact, so
Anritsu's Global Security Committee takes initiative to ensure that
management systems are activated to perform reliably in a global
environment. |
| |
|
Global Security Management
Activities |
|
As the network society continually evolves, so do
potential threats to information security. Accordingly, corporate
information security measures must be globally and quickly responsive.
In 2005, Anritsu's Global Security Committee took the initiative to
assess and categorize global and local security risks on behalf of Group
Companies.
Accordingly, we revised our Global Standard and set Local Standard
security measures. In the process, we developed a global
directory service for integrating
information management, including resources such as client PCs, servers,
and employee accounts. As a result, employees can access protected
information anywhere in the world, so that the system contributes to
global business management. Evolving these standards, we will continue
to integrate security globally, and take countermeasures against local
security risks. |
 |
|
|
ISMS Certification |
|
Addressing growing information security needs,
Anritsu Group in Japan acquired several ISMS (Information Security
Management System) certifications by August 2005. Anritsu Corporation
acquired the certification for design, development, manufacture and
maintenance of information system products as well as operation and
management of intra-company information systems. Also, Anritsu
Engineering Co., Ltd. acquired the "certificate for software and
hardware development service for customer requirement and software
application product development", as well as the
Privacy Mark - proof of proper
protection of personal information. In our ongoing quest to improve
information security, we plan to adopt the methodology acquired in the
process of obtaining ISMS certification throughout the Anritsu Group. |
|
|
|
Information Security Auditing for
Group Companies in Japan |
|
Each Group Company in Japan underwent an internal
audit to assess the application of each information security measure.
All departments conducted selfchecks by checklist and field audits by
sampling - and field-rehearsed newly introduced measures.
This survey determined that risks of lost and leaked information increase
by taking the information outside by various means as sales activity
increases outside the company. We therefore put into effect measures
such as USB memory security and its strict management, notebook PC
security, and more restrictions on use of business data (including
e-mail) on home and noncompany-supplied PCs, to prevent such incidents
from occurring. |
| |
|
Future Activities |
|
Effective information management demands proper
internal auditing and daily security inspection. We will continue
evolving the expertise of our internal auditing functions to strengthen
security handling and supervision. |
|
|