Risk Management
Basic Approach
In order to enhance corporate value while ensuring the soundness and stability of management, GLM recognizes that appropriately managing and controlling risks facing the company is one of its most important management issues. Toward this end, the Company is working to develop a risk management system.
Specific Initiatives
The Company has established the Risk Management Regulations to define risks, such as management risks, financial risks, operational risks, system risks, legal risks, and information leakage risks. The departments in charge of managing each type of risk engage in risk management such as identifying, analyzing, evaluating, controlling, and reducing risks. As a risk management method, the Company has introduced a risk assessment system and a risk event reporting system to prevent risks from occurring or reoccurring.
The details and status of preventive measures and recurrence prevention measures are regularly reported to the Risk and Compliance Committee, chaired by the CEO, for deliberation. As a response to the risk of information leakage, the Company has obtained ISMS certification and established a system to appropriately manage customer information.
Risk Management Structure
Acquisition of ISMS Certification
Acquired ISO/IEC 27001 Information Security Management System (ISMS) certification.
Compliance
Basic Approach
GLM considers compliance to be complying with laws, regulations, and social norms, and acting in accordance with high ethical standards.
The Company, recognizing that ensuring compliance is an important management issue, is striving to promote compliance.
Specific Initiatives
The Company has established the Compliance Management Regulations and the Compliance Department plays a central role in promoting compliance through the formulation of compliance programs and compliance training. In addition, the Company has assigned a person responsible for compliance in all departments to enhance effectiveness. The status of compliance promotion is regularly reported to the Risk and Compliance Committee, chaired by the CEO, for deliberation.
In addition, the Company has established whistleblowing regulations and put into place a system to identify the early signs of compliance violations.
