INFORMATION SECURITY

Information Security Basic Policy

Basic Philosophy

Nangok R/Studios, Inc. (hereinafter “the Company”) regards various information assets — including customer information handled in the course of its business — as extremely important to the foundation of the Company’s management.

The Company recognizes the importance of protecting these information assets from risks such as leakage, damage and loss, and all employees — from officers and staff down — shall adhere to this policy and promote activities to maintain information security, including the confidentiality, integrity and availability of information assets.

Basic Policy

In order to protect information assets, the Company formulates an information security policy, conducts its business in accordance with it, and complies with laws and regulations concerning information security, other norms and contractual obligations.

The Company clarifies the criteria for analyzing and evaluating risks of leakage, damage, loss and so on that exist for information assets, establishes a systematic risk-assessment method and conducts risk assessments on a regular basis. Based on those results, it implements the necessary and appropriate security measures.

The Company establishes an information security system centered on its officers, and clarifies the authorities and responsibilities concerning information security. It also regularly provides education, training and awareness programs so that all employees recognize the importance of information security and ensure the proper handling of information assets.

The Company regularly inspects and audits compliance with the information security policy and the handling of information assets, and promptly takes corrective action on any deficiencies or improvement items discovered.

The Company takes appropriate action in response to information security events and incidents, and has established response procedures in advance to minimize harm should they occur. In such cases it responds swiftly and takes appropriate corrective action. In particular, for incidents that could lead to business interruption, it establishes a management framework for them and ensures business continuity through periodic response and recovery tests, and reviews.

The Company establishes an information security management system with objectives set to realize the basic philosophy, executes it, and continually reviews and improves it.

Established: January 6, 2020
Nangok R/Studios, Inc.