G :Governance
Risk Management
Risk Management
Risk Management System
Information Security Initiatives
BCP Initiatives
Review of FY 2024 Activities
Future Challenges and Countermeasures
Risk Management System
A Risk Management Committee chaired by the Head of Corporate Administration Division has been established to strengthen the defense system in response to the various risks facing the company, and risks that can have a significant impact on management are managed throughout the organization, and appropriately evaluated and responded to. Furthermore, in response to the specific individual risk involving compliance, safety, disasters, information security, and export management, we have established committees and councils including the Corporate Compliance Committee, Central Safety and Health Committee, Central Disaster Prevention Council, CSR Council, Environment Council, Information Security Council, Personal Information Protection Management Committee, and Export Control Committee. We have prepared and developed regulations, guidelines, and manuals for implementing risk management, and we also conduct education and training activities.
The activities of the Risk Management, Corporate Compliance, Export Control, and Personal Information Protection committees are periodically reported to the Board of Directors.
Other committees’ activities are reported at management meetings as appropriate, and matters are reported to the Board of Directors if doing so is deemed necessary.
The activities of the Risk Management, Corporate Compliance, Export Control, and Personal Information Protection committees are periodically reported to the Board of Directors.
Other committees’ activities are reported at management meetings as appropriate, and matters are reported to the Board of Directors if doing so is deemed necessary.
Risk Management Structure
The following meetings* were held in FY 2024:
* Includes ad hoc committee meetings
| Risk Management Committee | Met 9 times |
|---|---|
| Personal Information Protection Management Committee | Met 3 times |
| Export Control Committee | Met twice |
| Information Security Committee | Met twice |
In addition to regular committee meetings held twice a year, the Risk Management Committee and other committees may hold extraordinary committee meetings based on the criteria set forth in the committee rules.
In FY2024, the Risk Management Committee and the Personal Information Protection Committee held extraordinary committee meetings, and the results of the meetings are shown in the table above.
Going forward, we will not neglect our daily activities, and we will implement the PDCA cycle by identifying possible risks, considering countermeasures, notifying the parties involved, and conducting verification.
In FY2024, the Risk Management Committee and the Personal Information Protection Committee held extraordinary committee meetings, and the results of the meetings are shown in the table above.
Going forward, we will not neglect our daily activities, and we will implement the PDCA cycle by identifying possible risks, considering countermeasures, notifying the parties involved, and conducting verification.
Information Security Initiatives
Yokohama Rubber Group Basic Policy on Information Security
【Purpose】
Yokohama Rubber Co., Ltd. and each of its group companies (hereinafter collectively referred to as “our group”) recognize the importance of managing and utilizing information systems and information assets, and we will take appropriate measures for all information systems and information assets based on the following basic policy, in order to contribute to maintaining business activities by ensuring information security levels, and to prevent information security incidents and incidents, which we consider to be our social responsibility.
【Basic Policy on Information Security】
- Protection and appropriate management of information assets
Our group will establish appropriate management requirements and protect and manage information assets based on their level of importance. - Compliance with laws and internal regulations
Our group will take responsibility for information security and strictly adhere to information management by complying with laws and regulations. - Implementation of ongoing education and training
Our group's employees will endeavor to acquire information security knowledge through ongoing education and training. - Response to information security incidents and accidents
In the event of an information security incident or accident, the Group will formulate an incident response plan to ensure a swift response and business continuity, and will implement measures to minimize damage and prevent recurrence. - Formulation and continuous improvement of information security management rules
The Group will conduct regular information security audits to promote the establishment and improvement of information security.
Yokohama Rubber and the Yokohama Rubber Group implement various information security measures based on the Yokohama Rubber Group Information Security Basic Policy to protect confidential information, including customer personal information, from threats such as increasingly sophisticated and complex cyberattacks and other risks of information leakage.
As for information security rules and regulations, we have established Information Security Management Rules and Guidelines, and we periodically review them in response to changes in the information security environment.
As part of the Yokohama Rubber Group's overall initiative, we have appointed Information Management Officers within each organization and group company. We have established an Information Security Communication Network and operate an “Information Security Liaison Office” to centralize and provide information, including issues raised by stakeholders.
We are strengthening relationships to ensure rapid response even in the unlikely event of an information security incident.
Furthermore, there were zero major information security incidents (information security incidents proven to be violations of information security-related codes of conduct, corporate policies, or laws) in fiscal year 2024.
We also conduct targeted attack email training and e-learning for employees at least once a year.
Our information security management system is certified by TISAX (Trusted Information Security Assessment Exchange), an information security assessment developed by the German Association of the Automotive Industry, in 2022.
We conduct regular information security interviews with group companies, implement security training, facilitate daily information sharing and awareness campaigns, and promote heightened awareness to foster information security literacy across the entire group.
As for information security rules and regulations, we have established Information Security Management Rules and Guidelines, and we periodically review them in response to changes in the information security environment.
As part of the Yokohama Rubber Group's overall initiative, we have appointed Information Management Officers within each organization and group company. We have established an Information Security Communication Network and operate an “Information Security Liaison Office” to centralize and provide information, including issues raised by stakeholders.
We are strengthening relationships to ensure rapid response even in the unlikely event of an information security incident.
Furthermore, there were zero major information security incidents (information security incidents proven to be violations of information security-related codes of conduct, corporate policies, or laws) in fiscal year 2024.
We also conduct targeted attack email training and e-learning for employees at least once a year.
Our information security management system is certified by TISAX (Trusted Information Security Assessment Exchange), an information security assessment developed by the German Association of the Automotive Industry, in 2022.
We conduct regular information security interviews with group companies, implement security training, facilitate daily information sharing and awareness campaigns, and promote heightened awareness to foster information security literacy across the entire group.
BCP Initiatives
The Yokohama Rubber Group BCP※ Policy
In carrying out our business continuity initiatives, our company prioritizes the respect for human life and operates based on the following activities:
- Prioritize the safety of life for employees, visitors, and others. (Perspective: Respect for Human Life)
- Minimize the impact on our customers' business operations. (Perspective: Social Responsibility)
- Minimize the impact on our own business resulting from a business interruption. (Perspective: Business Impact on Management)
- Enhance corporate value through business continuity initiatives.
- BCP: Business Continuity Plan
Review of FY 2024 Activities
Verifying employee safety
In fiscal year 2009, we implemented a safety confirmation system encompassing our domestic production subsidiaries and have been conducting regular training exercises ever since. These exercises are conducted at each location on a regular basis and, since 2021, have included a nationwide safety confirmation drill every March. By increasing the frequency of these drills, we aim to enhance our initial response capabilities in the event of a disaster and foster a stronger sense of disaster preparedness among our employees. In the event of a large-scale disaster, we have established a central disaster response headquarters at the corporate level, along with mechanisms for information gathering and sharing. We have also implemented a multi-channel communication system and a virtual meeting room with a permanent information-sharing platform, ensuring swift communication even in situations where physical gathering is challenging.
Being prepared for a disaster (database activation)
Since 2017, our “Disaster Prevention Guidelines” have specified the types and quantities of emergency supplies that should be stockpiled at each location, based on the maximum number of personnel operating at each site.
Based on the guidelines, the database manages and confirms that stockpiles have been secured for the required number of days, and any shortages, including replacement of expired stockpiles, are replenished.
We have also ensured sufficient quantities of emergency toilets.
Furthermore, we will systematically conduct drills for distributing emergency supplies and responding to stranded commuters.
Based on the guidelines, the database manages and confirms that stockpiles have been secured for the required number of days, and any shortages, including replacement of expired stockpiles, are replenished.
We have also ensured sufficient quantities of emergency toilets.
Furthermore, we will systematically conduct drills for distributing emergency supplies and responding to stranded commuters.
Stockpiling for disasters
Stockpiling for disasters
Fire Prevention, Disaster Prevention and BCP Initiatives
For fire prevention activities, we significantly revised the company-wide “Fire Prevention Guidelines” in August 2025. These guidelines aim to prevent fires before they occur, prevent the spread of fires in the event of an accident, and prevent recurrence.
This revision specifically incorporated more global management methods and detailed requirements into measures for static electricity control and hazardous materials management, classifying them into independent categories.
From fiscal 2025 onward, we will conduct global fire prevention audits based on fire prevention guidelines aimed at prevention and recurrence prevention. We will advance the strengthening of the Yokohama Rubber Group's fire prevention framework by continuously driving the PDCA cycle for improvement.
In disaster prevention activities, we revised the "Disaster Prevention Guidelines" in November 2023 to clarify our preparedness for increasingly severe natural disasters and infectious diseases occurring in wide areas.
Furthermore, these guidelines aim to maintain company operations based on the principle of prioritizing human life above all else, and clarify the actions employees should take during a disaster according to their location and the corresponding alert level.
This clarifies the company's disaster prevention system, the enhancement and management of disaster preparedness supplies, and other measures, all while prioritizing human life, thereby advancing the strengthening of Yokohama Rubber's disaster response capabilities.
Furthermore, starting in fiscal year 2023, we advanced the following at the Head Office, Hiratsuka Manufacturing Plant, and Mishima Plant: an action plan for Mount Fuji eruption countermeasures; defense systems for important facilities to prepare for ash fall damage; preparation of materials; provision of protective gear to employees; and post-eruption ash removal plans and material preparation.
We conduct regular disaster preparedness drills, ensuring that we are prepared to respond effectively to emergencies by regularly reviewing the content, frequency, and participation levels of these drills.
This revision specifically incorporated more global management methods and detailed requirements into measures for static electricity control and hazardous materials management, classifying them into independent categories.
From fiscal 2025 onward, we will conduct global fire prevention audits based on fire prevention guidelines aimed at prevention and recurrence prevention. We will advance the strengthening of the Yokohama Rubber Group's fire prevention framework by continuously driving the PDCA cycle for improvement.
In disaster prevention activities, we revised the "Disaster Prevention Guidelines" in November 2023 to clarify our preparedness for increasingly severe natural disasters and infectious diseases occurring in wide areas.
Furthermore, these guidelines aim to maintain company operations based on the principle of prioritizing human life above all else, and clarify the actions employees should take during a disaster according to their location and the corresponding alert level.
This clarifies the company's disaster prevention system, the enhancement and management of disaster preparedness supplies, and other measures, all while prioritizing human life, thereby advancing the strengthening of Yokohama Rubber's disaster response capabilities.
Furthermore, starting in fiscal year 2023, we advanced the following at the Head Office, Hiratsuka Manufacturing Plant, and Mishima Plant: an action plan for Mount Fuji eruption countermeasures; defense systems for important facilities to prepare for ash fall damage; preparation of materials; provision of protective gear to employees; and post-eruption ash removal plans and material preparation.
We conduct regular disaster preparedness drills, ensuring that we are prepared to respond effectively to emergencies by regularly reviewing the content, frequency, and participation levels of these drills.
Fire prevention audit
BCP Initiatives
In 2024, taking lessons from the Noto Peninsula Earthquake that occurred on New Year’s Day, we conducted a large-scale BCP drill assuming a situation where headquarters members were not present due to being a holiday night, confirming procedures for launching the Central Disaster Prevention Management Headquarters and communication using remote tools and emergency communication methods based on the response manual.
Going forward, we will continue drills and improvement activities based on various estimates to protect our employees from disasters as well as strengthen our systems and mechanisms to continue the supply of products and services during disasters.
Going forward, we will continue drills and improvement activities based on various estimates to protect our employees from disasters as well as strengthen our systems and mechanisms to continue the supply of products and services during disasters.
Business Continuity Planning (BCP) Drills (Headquarters and Hiratsuka Plant)
Future Challenges and Countermeasures
The business environment is becoming increasingly challenging due to global instability, the intensification and frequency of natural disasters caused by climate change, and the sophistication and complexity of cyberattacks. As such, further strengthening our risk management framework, along with fostering interdepartmental information sharing and communication, remain crucial priorities. We will continue to enhance our risk mitigation strategies through regular risk assessments and a continuous cycle of planning, doing, checking, and acting (PDCA) in each department. Furthermore, we will raise awareness among all employees by conducting Business Continuity Planning (BCP) drills and providing education and training on information security.
