The Teijin Group has established the Teijin Group Regulations for Information to define the basic policies for information management, information security, and the enhancement of information effectiveness, while promoting the advanced use of information, including the utilization of digital technologies. Through strengthened governance and the promotion of strategic initiatives that support these efforts, we aim to maximize the value of our information assets and enhance the competitiveness and corporate value of the Teijin Group as a whole.

The Teijin Group has appointed a Chief Digital Officer (CDO) as the person responsible for overseeing global DX/IT governance, including IT policy, IT investment/costs, IT organization/human resources, information security, and AI implementation. The CDO acts as the Risk Management Owner for information security, and the Teijin Group has established an information management structure within the Group by clearly defining the roles and responsibilities of the general manager of the IT Strategy Department at Teijin, the IT managers of each business unit, department, and Group company, and all employees. Additionally, under the CDO's supervision, we have established the Information Security Committee, with the general manager of the IT Strategy Department serving as chairperson and the IT managers of each business unit and management organization participating as members. This committee considers and implements cross-group information security measures and educational activities. To respond to information security incidents, the Teijin Group has established a Group Computer Security Incident Response Team (CSIRT), which monitors our information systems and data for attacks and suspicious activity around the clock, while also continuously working to improve its response processes, including prevention, detection, response, and recurrence prevention. We have also been a member of the Nippon CSIRT Association (NCA) since 2016, through which we are able to utilize the latest threat intelligence and case studies from other companies in day-to-day security measures.

Group Information Security Management Structure

The Teijin Group periodically reviews the management of information assets held and managed by each organization, such as information systems, networks, facilities, personal information, and confidential information. We strive to maintain and strengthen our level of information security by classifying these assets by importance, identifying threats, assessing risks, and then implementing appropriate countermeasures. To prepare for ransomware attacks and other threats, we implement technical measures including endpoint detection and response (EDR), data encryption, immutable backups, enhanced multi-factor authentication, and security log monitoring to ensure the integrity and confidentiality of data. We have also established reporting and response procedures for when security incidents occur, and maintain a 24/7 reporting system for suspicious emails and information security incidents, enabling their early detection and prompt response. In addition, we provide all executives and employees with regular e-learning programs and hands-on training to strengthen their practical response capabilities and raise information security awareness. In addition to these initiatives, the Corporate Auditing Department conducts information security audits for all Group companies from an independent standpoint, verifying the effectiveness of information security management and promoting its continuous improvement. As a result of these comprehensive efforts, no information security incidents with a significant impact on our business operations were identified in FY2025.

The Group Risk Management Regulations of the Teijin Group stipulate the reporting and handling procedures for incidents and accidents. We also have a system in place to receive reports from those who discover suspicious emails or security incidents 24 hours a day, 365 days a year.

With the goal of enabling every employee to properly utilize information assets while responding to growing security risks, the Teijin Group works to ensure that each individual acquires the essential awareness and knowledge needed to protect the Group's information assets. To this end, we regularly provide information security education through e-learning and group work by organizational unit, along with hands-on response training using simulated targeted-attack emails for all executive officers and employees.

We work to ensure compliance with laws and regulations in each country and region, and to thoroughly implement related measures through a system that assigns a "person responsible for protection of personal information".