GignoSystem Japan, Inc. operates a data processing service business that is driven primarily by our Information Provider Business, Systems Engineering Business and E-Commerce Business. We therefore have a responsibility to implement, maintain, and improve information security management systems and to provide customers with quality services and products that are secure and reliable. Aware of this responsibility, we would like to take this opportunity to announce our Basic Information Security Policy, and express our commitment to this policy.

• We will employ appropriate security measures for all information assets, including information on development products, confidential technical information, sales and customer information, personal information of customers, and personnel and employment information, and we will apply information security to all information assets relating to business activities.
• We will create an information security rule book and internal regulations such as ethics regulations for the handling of information, and employ appropriate information security measures according to the information handled.
• We will work to foster improved awareness of information security amongst executives and all employees, and provide regular and ongoing information security training to ensure that security measures are executed in full.
• Executives and all employees declare that they will act in observance of the information security rule book and ethical regulations for the handling of information. In the event that the regulations are violated, penalties shall apply in accordance with employment regulations and other internal regulations.
• All laws and ordinances, regulations and other provisions, as well as contracts with clients and business partners relating to information security shall be strictly observed.
• We shall assess the security risks for information assets through appropriate risk assessments and promote the implementation of effective security measures in light of the outcome of such assessments.
• Audits of management policies relating to information security shall be conducted on a regular basis to ensure that they are maintained and improved.
• Information security measures shall be promoted through a managing body, namely the "Information Security Group" established within the Company.