Information Security

There is a continued increase in the importance of information and information systems in improving the efficiency of office work and production technology continues to increase, as well as speeding up decision-making. At the same time, threats such as information destruction, leaks, and tampering and system destruction due to cyberattacks are increasing, and the risks associated with information and information systems are on the rise.
In this environment, in order to continue to maintain the satisfaction and trust of customers and to fully fulfill our role, we recognize that an important management challenge is to accurately identify information-associated risks and protect both the information entrusted to us by customers and the information and systems necessary for us to do business.

Framework

• The Chief Information Security Officer (CISO), appointed by resolution of the Board of Directors, oversees information security measures at JSW. Persons in charge of information security management and information security administrators are assigned at the Head Office and each plant, and information security administrators are assigned at domestic and overseas affiliated companies. The Information Security Committee (held at least once a year), chaired by the CISO, comprehensively discusses the status of information security incidents, recent threats to information systems, the environment in which the Company operates, and opinions and requests regarding the usability of various security measures, and conducts detailed verification on a regular basis each year.
  In addition, we are constantly working to maintain and improve security while continuously evaluating the adequacy of countermeasures against various cyber-attacks based on detailed analysis, including monthly information security risk assessments by a third-party organization and real-time communication checks by an external Security Operation Center (SOC) service.

• Structure of the Information Security Committee

  

Training

We conduct information security training (e-learning) every year for JSW officers and all employees to improve their security awareness and literacy.
Depending on the results of the annual targeted attack e-mail training, we have a system in place to provide more intensive information security education to some of the employees.

• Participation Rate in Information Security Training (e-learning)

  	FY2022	FY2023	FY2024
  Participation rate	100.0%	100.0%	100.0%