Recognizing the importance of cyber security, the Japan Post Group will position risks related to cyber attacks and other such threats as a critical issue in its corporate management and the management will take the initiative in driving the measures to address those risks.

Only after reviewing the functions of our cyber security measures (identification, defense, detection, response and recovery) according to changes in the surroundings, the Japan Post Group will develop business continuity plans (BCPs) with the aim of ensuring quick recovery from the event of any cyber security risk materializing.
The management will take the leading role in making its commitment clear to internal and external stakeholders, as well as in making efforts to disclose what risks are recognized and what action is taken to address them by, for example, voluntarily stating them in various types of reports.

The Japan Post Group will establish an organization engaged to work under normal circumstances in preparation for cyber attacks as well as to take action in the event of emergency and thereby conduct a range of activities relevant to cyber attacks, including monitoring, inspection, collecting and analyzing information, and responding to and recovering from incidents, and will also perform regular exercises and training sessions in an attempt to develop more sophisticated cyber security readiness.
For the purpose of cyber security enhancement, each class of the Group’s personnel, from executives to managers and employees, will be provided with necessary education.
The Group will pursue security measures that encompass its business associates, including contractors.

In order to maintain its cyber security measures and make them better, the Japan Post Group will continually perform inspections and work on improvements.

The Japan Post Group will have timely and appropriate coordination with related ministries and governmental agencies, such as the Ministry of Internal Affairs and Communications, the Financial Services Agency, the National Center of Incident Readiness and Strategy for Cybersecurity, the Information-Technology Promotion Agency and the police, and will also make proactive efforts in the exchange of information through JPCERT / CC and other relevant channels, thereby contributing to raising the levels of cyber security measures of the entire society