CSR Risk Management
The Code of Conduct of the Fujitsu General Way, which sets forth specifics to be taken into account as the basis for compliance at the Fujitsu General Group, is posted on the company intranet and also disseminated through training programs for executives and employees.
As part of our employee awareness-raising activities, we conduct training on the essentials of risk management for managers who are responsible for on-site risk management and internal controls. We also conduct training on important laws and regulations relevant to each division’s operations, such as the Anti-Monopoly Act, insider trading regulations, and the Subcontract Act, as well as the like business and human rights and information leak prevention. We also regularly send out e-mail newsletters to employees to raise awareness of compliance in general.
Risk management system
To promptly identify risks that may adversely affect the Fujitsu General Group, whether at home or overseas, and to implement countermeasures in a timely manner, risk assessments are conducted to confirm the appropriateness of the evaluation and management of risk by each division of the Company as well as Group companies. The Compliance & Risk Management Committee, organized every quarter, selects priority issues to be addressed while promoting activities to reduce risk.
Risk assessment
Each of Fujitsu General’s divisions and Group companies conducts risk assessment to evaluate risks that are considered to have a significant impact if they are actualized and consider risk reduction measures.
Specifically, from the perspective of compliance, we have identified risks that may arise from the status of compliance with various laws and regulations such as labor laws, anti-monopoly laws, bribery regulations, and environmental regulations applicable to our company, as well as risks that may arise from business activities such as product quality, IT security, natural disasters, and internal fraud. The Compliance & Risk Management Committee selects important themes that should be prioritized from a corporate perspective based on the degree of impact and the level of controls and promotes risk mitigation activities.
Internal reporting system "Corporate Ethics Helpline"
Fujitsu General Group has established the "Corporate Ethics Helpline" system, which ensures the protection of whistleblowers, as a means of directly reporting compliance issues in addition to norma business reporting channels. Through the use of this system, compliance issues are detected at an early stage and appropriate measures are taken.
The Corporate Ethics Helpline also covers reporting of internal fraud, bribery, and other violations of laws and regulations.
Information security
We have formulated an Information Security Policy and disclosed this policy both internally and externally in order to provide products and services that are trusted by society through the implementation of appropriate and advanced security measures.
We provide education related to information security to employees of the entire Group every year, and also hold annual drills to practice dealing with suspicious emails.
Business continuity management
The Fujitsu General Group has formulated a Business Continuity Plan (BCP) for the purpose of ensuring the safety of employees and their families while continuing and operating its business in the event of an unplanned disruption or large-scale natural disaster. Disasters include, but are not limited to, a major earthquake or the spread of new infectious diseases. In order to ensure the effectiveness of the BCP, our Group regularly conducts awareness-raising activities and BCP drills covering important business operations.
Disaster initial response training
Every year, we conduct initial response drills to prepare for events such as an inland earthquake in Tokyo or a Nankai Trough earthquake. In addition to the Human Resources Division, General Affairs Division, and IT Division, the divisions responsible for the business continuity of critical business operations all participate.