G :Governance
Risk Management
Risk Management
Risk Management System
Information Security Initiatives
BCP Initiatives
Review of FY 2025 Activities
Future Challenges and Countermeasures
Risk Management System
To strengthen our defense against various risks surrounding our Group, we have established the Risk Management Committee, chaired by the officer in charge of risk management, to manage risks that may have a significant impact on management across our Group and appropriately evaluate and respond to them.
Furthermore, in response to the specific individual risk involving compliance, safety, disasters, information security, and export management, we have established committees and councils including the Corporate Compliance Committee, Central Safety and Health Committee, Central Disaster Prevention Council, CSR Council, Environment Council, Information Security Council, Personal Information Protection Management Committee, and Export Control Committee. We have prepared and developed regulations, guidelines, and manuals for implementing risk management, and we also conduct education and training activities.
The activities of the Risk Management, Corporate Compliance, Export Control, Personal Information Protection Management, and Information Security Committees are periodically reported to the Board of Directors.
Furthermore, in response to the specific individual risk involving compliance, safety, disasters, information security, and export management, we have established committees and councils including the Corporate Compliance Committee, Central Safety and Health Committee, Central Disaster Prevention Council, CSR Council, Environment Council, Information Security Council, Personal Information Protection Management Committee, and Export Control Committee. We have prepared and developed regulations, guidelines, and manuals for implementing risk management, and we also conduct education and training activities.
The activities of the Risk Management, Corporate Compliance, Export Control, Personal Information Protection Management, and Information Security Committees are periodically reported to the Board of Directors.
Risk Management Structure
The following meetings* were held in FY 2025:
* Includes ad hoc committee meetings
| Risk Management Committee | Met twice |
|---|---|
| Personal Information Protection Management Committee | Met twice |
| Export Control Committee | Met twice |
| Information Security Committee | Met twice |
In addition to regular committee meetings held twice a year, the Risk Management Committee and other committees may hold extraordinary committee meetings based on the criteria set forth in the committee rules.
Going forward, we will not neglect our daily activities, and we will implement the PDCA cycle by identifying possible risks, considering countermeasures, notifying the parties involved, and conducting verification.
Going forward, we will not neglect our daily activities, and we will implement the PDCA cycle by identifying possible risks, considering countermeasures, notifying the parties involved, and conducting verification.
Information Security Initiatives
Yokohama Rubber Group Basic Policy on Information Security
【Purpose】
Yokohama Rubber Co., Ltd. and each of its group companies (hereinafter collectively referred to as “our group”) recognize the importance of managing and utilizing information systems and information assets, and we will take appropriate measures for all information systems and information assets based on the following basic policy, in order to contribute to maintaining business activities by ensuring information security levels, and to prevent information security incidents and incidents, which we consider to be our social responsibility.
【Basic Policy on Information Security】
- Protection and appropriate management of information assets
Our group will establish appropriate management requirements and protect and manage information assets based on their level of importance. - Compliance with laws and internal regulations
Our group will take responsibility for information security and strictly adhere to information management by complying with laws and regulations. - Implementation of ongoing education and training
Our group's employees will endeavor to acquire information security knowledge through ongoing education and training. - Response to information security incidents and accidents
In the event of an information security incident or accident, the Group will formulate an incident response plan to ensure a swift response and business continuity, and will implement measures to minimize damage and prevent recurrence. - Formulation and continuous improvement of information security management rules
The Group will conduct regular information security audits to promote the establishment and improvement of information security.
Yokohama Rubber and the Yokohama Rubber Group implement various information security measures based on the Yokohama Rubber Group Information Security Basic Policy to protect confidential information, including customer personal information, from threats such as increasingly sophisticated and complex cyberattacks and other risks of information leakage.
As for information security rules and regulations, we have established Information Security Management Rules and Guidelines, and we periodically review them in response to changes in the information security environment.
As part of the Yokohama Rubber Group's overall initiative, we have appointed Information Management Officers within each organization and group company. We have established an Information Security Communication Network and operate an “Information Security Liaison Office” to centralize and provide information, including issues raised by stakeholders.
We are strengthening relationships to ensure rapid response even in the unlikely event of an information security incident.
Furthermore, there were zero major information security incidents (information security incidents proven to be violations of information security-related codes of conduct, corporate policies, or laws) in fiscal year 2025.
We also conduct targeted attack email training and e-learning for employees at least once a year.
Our information security management system is certified by TISAX (Trusted Information Security Assessment Exchange), an information security assessment developed by the German Association of the Automotive Industry, in 2022.
In addition, our IT subsidiary has obtained ISO 27001 certification.
We conduct regular information security interviews with group companies, implement security training, facilitate daily information sharing and awareness campaigns, and promote heightened awareness to foster information security literacy across the entire group.
As for information security rules and regulations, we have established Information Security Management Rules and Guidelines, and we periodically review them in response to changes in the information security environment.
As part of the Yokohama Rubber Group's overall initiative, we have appointed Information Management Officers within each organization and group company. We have established an Information Security Communication Network and operate an “Information Security Liaison Office” to centralize and provide information, including issues raised by stakeholders.
We are strengthening relationships to ensure rapid response even in the unlikely event of an information security incident.
Furthermore, there were zero major information security incidents (information security incidents proven to be violations of information security-related codes of conduct, corporate policies, or laws) in fiscal year 2025.
We also conduct targeted attack email training and e-learning for employees at least once a year.
Our information security management system is certified by TISAX (Trusted Information Security Assessment Exchange), an information security assessment developed by the German Association of the Automotive Industry, in 2022.
In addition, our IT subsidiary has obtained ISO 27001 certification.
We conduct regular information security interviews with group companies, implement security training, facilitate daily information sharing and awareness campaigns, and promote heightened awareness to foster information security literacy across the entire group.
BCP Initiatives
The Yokohama Rubber Group BCP※ Policy
In carrying out our business continuity initiatives, our company prioritizes the respect for human life and operates based on the following activities:
- Prioritize the safety of life for employees, visitors, and others. (Perspective: Respect for Human Life)
- Minimize the impact on our customers' business operations. (Perspective: Social Responsibility)
- Minimize the impact on our own business resulting from a business interruption. (Perspective: Business Impact on Management)
- Enhance corporate value through business continuity initiatives.
- BCP: Business Continuity Plan
Review of FY 2025 Activities
Verifying employee safety
In fiscal year 2009, we implemented a safety confirmation system encompassing our domestic production subsidiaries and have been conducting regular training exercises ever since. These exercises are conducted at each location on a regular basis and, since 2021, have included a nationwide safety confirmation drill every March. By increasing the frequency of these drills, we aim to enhance our initial response capabilities in the event of a disaster and foster a stronger sense of disaster preparedness among our employees. In the event of a large-scale disaster, we have established a central disaster response headquarters at the corporate level, along with mechanisms for information gathering and sharing. We have also implemented a multi-channel communication system and a virtual meeting room with a permanent information-sharing platform, ensuring swift communication even in situations where physical gathering is challenging.
Being prepared for a disaster (database activation)
Since 2017, our “Disaster Prevention Guidelines” have specified the types and quantities of emergency supplies that should be stockpiled at each location, based on the maximum number of personnel operating at each site.
Based on the guidelines, the database manages and confirms that stockpiles have been secured for the required number of days, and any shortages, including replacement of expired stockpiles, are replenished.
We have also ensured sufficient quantities of emergency toilets.
Furthermore, we will systematically conduct drills for distributing emergency supplies and responding to stranded commuters.
Based on the guidelines, the database manages and confirms that stockpiles have been secured for the required number of days, and any shortages, including replacement of expired stockpiles, are replenished.
We have also ensured sufficient quantities of emergency toilets.
Furthermore, we will systematically conduct drills for distributing emergency supplies and responding to stranded commuters.
Stockpiling for disasters
Stockpiling for disasters
Fire Prevention, Disaster Prevention Initiatives
In September 2025, we revised the company-wide Fire Prevention Guidelines, which aim to prevent fires and prevent the spread of fires in the event of an emergency.
From fiscal 2026 onward, through the implementation of fire safety inspections, we are continuing to promote preventive management—including measures to prevent recurrence—and making ongoing improvements in management, training, and equipment to ensure that fires do not spread in the event of an emergency. We are also working to strengthen our fire prevention measures to ensure we have a firm grasp of the operations of our newly acquired Group companies, both domestic and overseas. In addition, we conduct fire safety training to ensure that every employee strictly adheres to the rules, and we continuously review standard operating procedures—including those for tasks involving hazardous materials—with a focus on fire hazard prediction through on-the-job observations.
In disaster prevention activities, we revised the "Disaster Prevention Guidelines" in November 2023 to clarify our preparedness for increasingly severe natural disasters and infectious diseases occurring in wide areas.
Furthermore, these guidelines aim to maintain company operations based on the principle of prioritizing human life above all else, and clarify the actions employees should take during a disaster according to their location and the corresponding alert level.
This clarifies the company's disaster prevention system, the enhancement and management of disaster preparedness supplies, and other measures, all while prioritizing human life, thereby advancing the strengthening of Yokohama Rubber's disaster response capabilities.
Disaster prevention drills are also held on a regular basis, and their content, frequency, and the number of participants are confirmed to ensure a quick response to disasters. We also conduct more practical distribution drills, specifically designed for people who may have difficulty returning home.
As a system to establish our central disaster response headquarters of the corporation in the event of a large-scale disaster as well as to collect and share information, we have built a tool that enables multiple means of communication and real-time sharing of information through online meetings, ensuring means of prompt communication that are available even in situations where it is difficult to gather physically.
From fiscal 2026 onward, through the implementation of fire safety inspections, we are continuing to promote preventive management—including measures to prevent recurrence—and making ongoing improvements in management, training, and equipment to ensure that fires do not spread in the event of an emergency. We are also working to strengthen our fire prevention measures to ensure we have a firm grasp of the operations of our newly acquired Group companies, both domestic and overseas. In addition, we conduct fire safety training to ensure that every employee strictly adheres to the rules, and we continuously review standard operating procedures—including those for tasks involving hazardous materials—with a focus on fire hazard prediction through on-the-job observations.
In disaster prevention activities, we revised the "Disaster Prevention Guidelines" in November 2023 to clarify our preparedness for increasingly severe natural disasters and infectious diseases occurring in wide areas.
Furthermore, these guidelines aim to maintain company operations based on the principle of prioritizing human life above all else, and clarify the actions employees should take during a disaster according to their location and the corresponding alert level.
This clarifies the company's disaster prevention system, the enhancement and management of disaster preparedness supplies, and other measures, all while prioritizing human life, thereby advancing the strengthening of Yokohama Rubber's disaster response capabilities.
Disaster prevention drills are also held on a regular basis, and their content, frequency, and the number of participants are confirmed to ensure a quick response to disasters. We also conduct more practical distribution drills, specifically designed for people who may have difficulty returning home.
As a system to establish our central disaster response headquarters of the corporation in the event of a large-scale disaster as well as to collect and share information, we have built a tool that enables multiple means of communication and real-time sharing of information through online meetings, ensuring means of prompt communication that are available even in situations where it is difficult to gather physically.
Fire prevention audit
BCP Initiatives
With regard to the Business Continuity Plan (BCP), we have prepared guidelines including the Basic BCP Guidelines for responding to various destructive and non-destructive disasters, such as infectious diseases. These guidelines are revised as necessary. In fiscal 2025, assuming that our four production sites in Aichi and Mie Prefectures were affected by the Nankai Trough earthquake, we conducted a large-scale BCP drill to verify the procedures for establishing our central disaster response headquarters and ensuring communication using remote tools and emergency communication methods, in accordance with the response manuals for each functional area.
In addition, the IT department is taking the lead in strengthening business continuity planning (BCP) to address cyberattacks, which have become a major social issue.
In addition, the IT department is taking the lead in strengthening business continuity planning (BCP) to address cyberattacks, which have become a major social issue.
The large-scale BCP drill
Future Challenges and Countermeasures
Since the risks surrounding companies are continuing to increase due to an unstable global situation, the intensification and increasing frequency of natural disasters, and advancement and sophistication of cyberattacks, we recognize that further strengthening of risk management as well as information sharing and communication among departments will continue to be important issues.
Going forward, each department in charge will regularly conduct risk assessments and implement the PDCA cycle to continue improving risk countermeasures, and raise the awareness of each and every employee through BCP drills and information security training and drills.
Going forward, each department in charge will regularly conduct risk assessments and implement the PDCA cycle to continue improving risk countermeasures, and raise the awareness of each and every employee through BCP drills and information security training and drills.
