Information security

In order to protect information assets, the Group has established rules and systems related to information security, and is continuously striving to strengthen information security throughout the Group.

The Nankai Group Information Security Standard Regulations have been established with the aim of raising the overall information security standards of the Group. In particular, the Company has established the Nankai Electric Railway Information Security Regulations, which are based on the CSF (NIST Cybersecurity Framework) issued by the international organization CISA, with the aim of ensuring an appropriate level of information security as an important infrastructure provider.(Figure 03-15 below)

The Group handles personal information in large volumes, so we have established and implemented the“Nankai Electric Railway Privacy Policy”with the belief that it is our important responsibility to use and protect personal information appropriately. Our business divisions and group companies have also established their privacy policy according to their business, and release and implement the policy internally and externally. We have organized a management system and established an inquiry desk for customers. Furthermore, we have organized internal rules for the handling of My Number and specific personal information for appropriate security control measures.(Figure 16-18 below)

We have established an Information Security Committee directly under the Group Top Management Meeting, and are promoting the strengthening of information security across the entire Group while working in collaboration with the Risk Management Committee. In addition, we have developed a Computer Security Incident Response Team (CSIRT) directly under the Information Security Committee, and we are committed to raising awareness of information security through rapid response in the event of an IT incident, as well as through training and education in ordinary times.