Information Security Report 2010 - Nec

NEC’s Initiatives to Build a Secure IT-Driven Society
Information Security Human Resources Development
The NEC Group develops human resources with expert knowledge and skills
relating to information security to meet the expectations of customers, business
partners, the general public and the market.
Framework of Information Security Human Resources Development
The NEC Group focuses on three categories of human
resources development for information security:
1) knowledge and awareness 2) promotion of security
measures and 3) a certification system for information
security professionals.
■ Information Security Human Resources Development
Knowledge and
Awareness
■ Training for All Employees
■ Information security training
■ Personal information protection
training
■ Pledge of Basic Rules for
Customers Support
■ Workplace Meetings on Information
Security
Promotion of
Security Measures
■ Development of Information
Security Management
Leaders
■ Development of Information
Security Assessors
Certification System
■ NEC Certified Professional System
■ NEC Skill Certification Program
Improving Knowledge and Increasing Awareness of Information Security
To maintain and improve information security, it is important
for each and every employee to act appropriately in
accordance with the NEC Group information security
policies. The NEC Group runs a variety of training programs
to ensure that employees have a thorough understanding
of information security policy and personal
protection policy, and that they act properly in accordance
with those policies.
(2) Enforcement of “Basic Rules for Customers
Support”
With the objective of ensuring the security of customer
information and personal information, we compiled “Basic
Rules for Customers Support,” which state the minimum
rules that must be followed. Electronic Pledge System is
used by the NEC Group employees and our suppliers to
confirm that they agree to observe the rules.
(1) Training on Information Security and
Personal Information Protection
All employees use a web-based training system called
Learning Door, NEC’s human resources development
platform, to acquire essential knowledge on the subject
of information security and to increase awareness. We
review the contents of the information security training
and updates them every year so that the training curriculum
incorporates specific information on security incidents
and practical issues in real business scenes. At
overseas subsidiaries, more employees will take part in
the course in fiscal 2011 to reinforce information security
on a global level.
(3) Workplace Meetings on Information Security
The NEC Group conducts meetings on information security
at each workplace using case studies. The purpose of
these meetings is to share security information and raise
security awareness through active dialog and to help with
the resolution of security issues at the workplace. Effective
activities have been held at many workplaces. The activities
included Video-based training on the importance of
information security, training on risk prediction, and discussions
on various topics (for example management of
confidential information, how to prevent email address
errors, and conduct risk analysis).
14
NEC CORPORATION
Information Security Report 2010