Data Utilization & Security

The Yamato Group stores and handles the important personal information of many customers. In order to continue operating our business sustainably in the future, we believe that it is essential to ensure information security. We are working to prevent the leakage of personal information by setting based on our Group Corporate Philosophy and Corporate Stance, which advocate the protection of personal information. Going forward, in addition to ensuring information security, we will also utilize big data obtained from vehicles nationwide to solve social issues and provide new value.

In order to ensure information security, the Yamato Group has established a system to continuously supervise and handle information security-related matters, led by the Compliance and Risk Committee, chaired by the officer responsible for compliance and risk management. The Yamato Group business divisions that handle confidential information most frequently have also acquired ISO 27001 (ISMS) certifications.
For details of ISO 27001 certification status, please refer to ESG data.

As a custodian of customers' personal information, the Yamato Group considers it its social responsibility to protect information assets. We have therefore formulated the following information security policies.

The Yamato Group conducts information security training once a year, aiming for a 100% attendance rate. We also conduct regular internal and external audits at our ISO27001-compliant business locations. The risk of cyber-attacks from outside has increased in recent years, and we believe that countermeasures against cyber-attacks are an urgent issue. The Yamato Group has established a dedicated department (YAMATO CSIRT) to combat cyber-attacks, and is engaged in various preventive measures. In order to ensure safe and appropriate handling of personal information, we will continue striving to improve customer confidence by instilling rules on information security and expanding educational opportunities.