Enacted May 7, 2002
Revised June 1, 2018

OKI Group Information Security Basic Policy

In order to protect the information assets we have received from our customers and business partners, as well as our own information assets, the OKI Group has established the "Information Security Basic Policy," and pledges that all members of the OKI Group will follow this policy.

1. Promotional system for information security
   The OKI Group has developed an information security system in which we continuously promote the cycle of drawing up plans relating to information security, and then conducting execution, evaluations, and improvements.
2. Efforts toward information security
   The OKI Group carries out appropriate information security measures based on a visualization structure (monitoring etc.), a support structure (introduction of IT), and a protection structure (regulations and education), and endeavors to ensure that, with regard to information assets, illicit infiltration, leakage, manipulation, loss, theft, destruction, suspension of use, and the like do not occur.
3. Information security education
   The OKI Group continuously carries out information security education targeting all employees, training each and every person thoroughly to protect information assets.
4. Observance of laws and ordinances
   The OKI Group strives to develop internal regulations and spread awareness to directors and all employees in order to ensure the observation of laws and ordinances, nationally stipulated guidelines, and international standards that are applied to information security.
5. Response to information security accidents
   In the event that an information security accident has taken place, the OKI Group makes efforts to respond swiftly and prevent expansion of the damage.