{ "lang": "en", "langLabel": "English", "meta": { "title": "Information Security Policy & ISMS Certification | ITSN, Inc.", "description": "ITSN, Inc.'s Information Security Policy and ISMS (ISO/IEC 27001:2022) certification details. Registration No. ASJ-0014, certified by ArmStandard Inc. Scope covers system integration, operations & maintenance, outsourcing, network monitoring, help desk, and call center services.", "ogTitle": "Information Security Policy & ISMS Certification | ITSN, Inc.", "ogDescription": "ITSN, Inc.'s Information Security Policy and ISMS (ISO/IEC 27001:2022) certification details." }, "breadcrumb": { "home": "Home", "company": "Company", "current": "Information Security Policy" }, "page": { "titleEn": "SECURITY POLICY", "titleLocal": "Information Security Policy & ISMS Certification", "lead": "ITSN, Inc. is committed to rigorously protecting our clients' information assets and providing stable, dependable services." }, "isms": { "heading": "ISMS (Information Security Management System) Certification", "intro": "ITSN, Inc. has obtained certification under the international information security standard JIS Q 27001:2025 (ISO/IEC 27001:2022) to protect our clients' information assets from internal and external threats, and to ensure continuous and stable service delivery.", "infoHeading": "Certification Details", "info": { "standardLabel": "Standard", "standardValue": "JIS Q 27001:2025 (ISO/IEC 27001:2022)", "registrationLabel": "Registration No.", "registrationValue": "ASJ-0014", "applicationLabel": "Application No.", "applicationValue": "SJ230005", "bodyLabel": "Certification Body", "bodyValue": "ArmStandard Inc.", "registeredOnLabel": "Registration Date", "registeredOnValue": "July 5, 2024", "validUntilLabel": "Valid Until", "validUntilValue": "July 4, 2027", "soaLabel": "Statement of Applicability", "soaValue": "Ver. 1.2, May 20, 2024" }, "scopeHeading": "Scope of Certification", "scopeLead": "The following business areas are included in the scope:", "scope": { "si": "Information systems integration services", "design": "Design, construction, configuration, and maintenance of information systems", "procurement": "Procurement and sales of related products", "outsourcing": "Information systems outsourcing services", "monitoring": "Network monitoring", "helpdesk": "Help desk", "callcenter": "Call center" }, "officesHeading": "Sites Covered", "offices": { "tokyo": "Head Office (2nd Higashi Bldg. 8F, 1-14 Kanda-Sakumacho, Chiyoda-ku, Tokyo 101-0025, Japan)", "osaka": "Osaka Branch (Showa Building 5F, 2-5-24 Nishihonmachi, Nishi-ku, Osaka 550-0005, Japan)" } }, "policy": { "heading": "Information Security Policy", "preamble": "ITSN, Inc. implements appropriate information security measures to protect the information assets we use from internal and external threats, and to ensure continuous and stable service delivery to our clients.", "items": { "i1": "We recognize the importance of protecting information assets from risks such as leakage, tampering, destruction, loss, and unauthorized use, and we maintain the required confidentiality, integrity, and availability of these assets.", "i2": "Should any security incident occur involving an information asset, we will promptly investigate the cause and act to minimize the impact.", "i3": "For particularly critical information assets, we maintain adequate safeguards so that their availability is not impaired.", "i4": "We comply with all laws, regulations, and other applicable standards related to information security.", "i5": "We provide ongoing education and training so that employees recognize the importance of information security and use information assets appropriately.", "i6": "We conduct regular audits of information security controls and strive for continual improvement." }, "revision": "Revised August 18, 2025", "ceo": "Katsuyuki Chichiwa, Representative Director" }, "measures": { "heading": "Key Security Measures We Operate", "intro": "As an ISMS-certified company, ITSN operates the following effective security controls across the organization.", "physical": { "heading": "Physical Security", "i1": "IC card access control to work areas, kitting rooms, and meeting rooms at both Head Office and Osaka Branch", "i2": "Surveillance cameras with recording log management installed throughout all rooms", "i3": "Physical anchoring of customer equipment with security cables", "i4": "USB drives stored in locked key boxes, used by application only, with monthly inventory checks" }, "technical": { "heading": "Technical Security", "i1": "BitLocker encryption applied to all company PCs", "i2": "Anti-malware software deployed on every endpoint", "i3": "Real-time monitoring via an integrated monitoring system", "i4": "Operation of firewalls, UTM, and intrusion prevention systems (IPS)", "i5": "Strict enforcement of passwords on shared files" }, "operational": { "heading": "Operational Security", "i1": "Annual business continuity drill (restore exercise from cloud backup)", "i2": "Periodic internal audits by certified internal auditors", "i3": "Regular security training for executives, employees, and partners", "i4": "Security briefings for partners on entering our premises", "i5": "Continuous review of the information asset register", "i6": "Annual risk assessment" }, "contractual": { "heading": "Contractual Security", "i1": "Non-disclosure undertakings signed by every employee", "i2": "Master service agreements and NDAs concluded with every partner company" }, "audit": { "heading": "Latest Audit Status", "body": "At the periodic audit in May 2025, certification was maintained with zero major and zero minor non-conformities. Findings from the previous audit have all been fully closed." } }, "benefits": { "heading": "What ISMS Certification Means for Our Clients", "b1": { "heading": "1. International-standard information management", "body": "We handle our clients' confidential, system, and personal data under a management framework that complies with an international standard." }, "b2": { "heading": "2. Eligibility in security-sensitive industries", "body": "We meet the criteria for engagements in industries with strict information security requirements, including finance, healthcare, public sector, and broadcasting." }, "b3": { "heading": "3. Continual-improvement framework", "body": "We carry out continual-improvement activity through the PDCA cycle, under regular audits by our certification body." }, "b4": { "heading": "4. Fast response to security incidents", "body": "In the event of an incident, we follow defined procedures to investigate the cause, minimize the impact, and prevent recurrence." } }, "cta": { "heading": "Talk to us about information security", "body": "We welcome questions and discussions about information security.", "button": "Contact Us" }, "header": { "brandAria": "ITSN Home", "navAria": "Primary navigation", "menuAria": "Menu", "mission": "Mission", "services": "Services", "company": "Company", "contact": "Contact Us", "serviceSite": "Service Site", "recruitSite": "Recruit Site", "openServiceSite": "Open service site (new tab)", "openRecruitSite": "Open recruit site (new tab)" }, "langSwitch": { "currentLabel": "English", "modalTitle": "Select a language", "close": "Close" } }