Casio pursues risk management under the basic policy to predict risks, implements preventative measures to minimize potential losses, and, if losses are incurred, takes effective follow-up measures to ensure business continuity. In addition, Casio has established the Casio Business Conduct Guidelines, which specifically outline important codes of conduct for executives and employees of the Casio Group in implementing the Casio corporate creed of “Creativity and Contribution” across the company’s businesses.

The Internal Control Committee carries out cross-sectional integration of functions related to internal control, including compliance, information security, and risk and crisis management, to realize an effective, streamlined, and fail-proof risk management structure. It also deliberates and makes decisions on policies and responses to issues concerning internal control in general within the Casio Group.

In June 2022, the Internal Control Committee was transitioned from an independent organization to the business execution side of Casio’s corporate structure in order to further promote appropriate, sound, and efficient business operations, which is the purpose of internal control. In cooperation with the Management Meeting, the Internal Control Committee visualizes and checks business operations from the viewpoint of appropriateness, soundness, and efficiency, thereby ensuring the system for addressing various risks is reliable.

Risks that pose a serious impact on management are managed following the structure below based on the Risk Management Rules through collaboration among relevant organizations under the supervision of the Internal Control Committee.

Basic Structure

We will continue to develop education, training, and procedural manuals that serve as the foundation of Companywide risk management to prevent losses and minimize the impact on Company operations in the event of an incident.

Response Implementation Structure

This will serve as a total structure that ensures stable business continuity by enabling effective initial response, including prompt status assessment and information communication, and appropriate decision-making in the event of an incident.

In order to effectively conduct risk management, we predict various risks that may involve the Casio Group, and conduct global risk surveys to identify the frequency and impact of risks occurring and assess if appropriate measures are taken. Currently, we have identified three important risks—competition law, privacy law, and cybersecurity—and are implementing the following measures.

Competition Law

We have established the Antitrust Compliance  Program and distributed the Compliance Manual to all global sites and are conducting employee education. We are also endeavoring to further entrench this program by carrying out audits on antitrust compliance, reviewing responses to problems identified by audits, and implementing measures.
In Japan, the Act against Unjustifiable Premiums and Misleading Representations Compliance Committee was established by relevant departments, and awareness promotion activities, including development of self-management regulations and education, are being implemented. Moreover, we are striving to provide guidance through the responsible staff office, share customer opinions and feedback, and share case studies from self-audits and improvements implemented in relevant departments. Going forward, we will conduct regular audits based on the implementation status of education, and further enforce this program.

Privacy Law

As laws and regulations concerning personal information become more stringent globally, in order to promote business using data worldwide, we must adhere to the privacy laws of each country. To this end, in March 2021, we established the Office for Personal Data Protection outside Japan, a dedicated office for addressing global privacy laws. The office works to strengthen compliance structure by tracking legal trends of each country, ensuring the appropriate handling of personal information—from acquiring to storage, usage, and disposal—and conducting employee education and regular audits.

Cybersecurity

In addition to responding appropriately to the increasing number of information security incidents, Casio is continuously strengthening its information security management level, both in normal times (proactive measures) and in emergency situations (post-incident measures). We have established the Computer Security Incident Response Team (CSIRT) so that take rapid action in the case of an incident. While implementing technical measures within the Group backed mainly by the Information Technology & Engineering Department, we are working on defining rules and conducting education among employees.

The impact of the COVID-19 pandemic is long lasting. The economy has slowed, primarily affecting consumer spending and corporate production, and these extremely harsh conditions continue.
Casio launched a task force in late January 2020 tasked with ensuring the safety of customers, business partners, and employees and their families, and is making preventing the spread of the virus a top priority. Casio is also working with related divisions both within and outside the Company, and doing all it can to minimize the impact of the pandemic on its business.
Casio introduced remote work early on as a specific initiative to prevent the spread of infection among employees. Employees who have to be on site to do their jobs are asked to come in on a staggered schedule, commute in their own cars, and use online meetings to reduce opportunities for interaction. In addition, Casio is working with regional health authorities to promote the creation of vaccination opportunities for employees and other persons in an effort to protect customers, business partners, and local communities.