Footprint‑AI Information Security PolicyFootprint‑AI(信誠金融科技股份有限公司)情報セキュリティポリシー
Purpose目的
This policy is established to demonstrate Footprint‑AI’s
commitment to secure and reliable services, recognizing information security as
the foundation for service continuity and brand reputation. It serves as a
guiding principle to protect company assets from internal and external,
intentional or accidental threats.
To implement an ISMS (Information Security Management System)
that meets international standards and ensures confidentiality, integrity,
availability, and compliance. Define performance indicators by role/function to
evaluate the effectiveness of the system.
Our policy statement: “Continuous service, zero data loss, no
personal data leaks, and sustainable business operation.”
「サービス中断なし、データ損失ゼロ、個人情報漏洩なし、企業の持続可能な運営」の実現を宣言します。
Scope適用範囲
This ISMS applies to all personnel, including software
development/test environments, cloud systems, physical environments, business
services, and related processes within the company.
The ISMS includes areas such as organization and management
review, risk management, documentation, auditing, HR security, asset management,
access control, physical and environmental security, operational and
cryptographic controls, communication security, system
acquisition/development/maintenance, supplier relationships, incident handling,
business continuity, and compliance. Relevant departments should establish
controls and plans, implementing and regularly evaluating their effectiveness.
To ensure the ISMS functions effectively, roles and
responsibilities must be clearly defined across the organization for
implementation, auditing, and continuous improvement.
This document shall be reviewed at least annually to reflect
legal, technological, and operational changes. Revisions must be approved by
management and shared with stakeholders.