Information Security Policy

Information Security Policy

Basic Philosophy

Y4.com Inc. (hereinafter referred to as "the Company"), as a business operator providing Specific Health Guidance, general long-term care prevention, severe disease prevention, Health & Productivity Management, health promotion, maternal and child support, and disaster support services utilizing health management platforms and ICT devices, recognizes the importance of protecting the valuable information assets of our clients from the risks of leakage, damage, or loss, and conducts activities to maintain information security with all employees complying with this Basic Policy.

Basic Policy

1. Compliance with Laws and Regulations

To protect information assets, we establish a security policy and conduct business in accordance with it, while complying with laws, regulations, and other norms related to information security, as well as contractual terms with our clients.

2. Information Security Objectives

To protect information assets, the Company establishes information security objectives and periodically monitors and evaluates the degree of their achievement.

3. Establishment of Information Security Management System

The Company establishes an information security management structure centered on the Representative Director and clarifies responsibilities and authorities regarding information security. Furthermore, we conduct regular education, training, and awareness activities so that all employees recognize the importance of information security and ensure the proper handling of information assets.

4. Management of Information Assets

The Company implements organizational, physical, technical, and human control measures to promote the safe and proper management and operation of information assets, and takes necessary and appropriate security measures to prevent leakage, damage, or loss of information assets.

5. Response to Information Security Incidents

The Company strives to prevent the occurrence of information security incidents. In the unlikely event that an information security incident occurs, we will respond promptly.

6. Continuous Improvement

The Company establishes a mechanism based on the international standard ISMS (Information Security Management System), executes it reliably, and continuously improves it.