Information Security Report 2010 - Nec

More documents

Recommendations

Info

Contents 01 NEC’s Approach to Information Security 02 Information Security Promotion Framework 03 Information Security Governance 04 Information Security Management 08 Information Security Platform 14 Information Security Human Resources Development 16 Information Security Measures in Cooperation with Suppliers 18 Improving the Security of Products and Services 20 Security Solutions Trusted by Customers 22 Third-Party Evaluation and Certification 24 Corporate Data On the Publication of This Report This report is being published to provide a better understanding of information security initiatives in the NEC Group. The report covers related initiatives through March 2010. For Inquiries Regarding This Report NEC Corporation Management Information Systems Division Security Technology Center NEC Headquarters 7-1 Shiba 5-chome, Minato-ku, Tokyo 108-8001 Tel. 03-3798-6980 NEC CORPORATION Information Security Report 2010
NEC’s Initiatives to Build a Secure IT-Driven Society NEC’s Approach to Information Security The NEC Group strives to become a leading information security company trusted by society. Yukihiro Fujiyoshi Senior Executive Vice President NEC Corporation In 2008 the NEC Group pledged to become “a leading global company leveraging the power of innovation to realize an information society friendly to humans and the earth” as part of our NEC Group Vision 2017. We also systematized all of our management activities as The NEC Way. Under our V2012 Mid-Term Growth Plan, we aim to achieve NEC Group Vision 2017 through customer-driven solutions leveraging our competitive strengths. These strengths lie in the integration of IT and networks, in particular building on the trend toward cloud computing. But we will also continue to utilize the strengths we have accumulated over more than thirty years as leading practitioners of the integration of computers and communications (C&C). All of these strengths will enable us to expand our business globally under our “One NEC” concept and contribute to our customers and the future of society. To carry out The NEC Way, we believe we must enforce compliance with relevant laws and regulations as a matter of course. But we must also enhance our corporate value as we fulfill our social responsibilities as a good corporate citizen, working to earn the trust of all stakeholders, including our customers, shareholders, other investors, suppliers, local communities, and employees. In fulfilling our social responsibilities, the NEC Group puts particularly strong emphasis on maintaining and enhancing information security. This is because improper access, leaks, alterations, losses, theft, destruction, and interference with the use of information assets cause substantial damage and inconveniences for society as a whole. It has been ten years since the NEC Group first recognized information security as an important management issue and began considering it on a company-wide committee level. Today, our efforts are focused on the following five points: ■ Ensuring that the NEC Group works together as “One NEC” to promote the maintenance and enhancement of information security. ■ Expanding measures to include not just the NEC Group, but our suppliers as well. ■ Achieving a balance between the appropriate protection of information and its appropriate sharing and use. ■ Using a comprehensive approach that incorporates the building of information security management systems, and the establishment of information security platform, and the development of human resources for information security, all to maintain and enhance information security on multiple levels. ■ Providing customers with reliable security solutions that have been proven in-house. This report presents the NEC Group’s information security initiatives. Please use it to deepen your understanding of these important initiatives. NEC CORPORATION Information Security Report 2010 01
Page 1: Information Security Report 2010 Ye
Page 5 and 6: NEC’s Initiatives to Build a Secu
Page 7 and 8: ■ NEC Group Management Policy The
Page 9 and 10: ■ Utilizing Results from Organiza
Page 11 and 12: IT Platform for User Management and
Page 13 and 14: (Centralized Management of Security
Page 15 and 16: (4) Thin Clients To prevent informa
Page 17 and 18: Development of Security Promotion M
Page 19 and 20: 1) Designating managers responsible
Page 21 and 22: When development takes place while
Page 23 and 24: We aim to speed up management, visu
Page 25 and 26: Privacy Mark Certification The foll
Page 27 and 28: The NEC Way “The NEC Way” is th
Page 29 and 30: NEC Information Security Statement

Information Security Report 2010 - Nec

Create successful ePaper yourself

Delete template?

Save as template?