SECURITY POLICY

MESCIUS inc. (hereinafter referred to as “We” or “Our”) uses considerable amounts of information assets in the course of our business and in managing our employees, and thus recognizes that ensuring appropriate information security and striving to protect the information assets of our customers and stakeholders are essential requirements for promoting corporate activities based on social trust in addition to being important social responsibilities. Accordingly, in view of the importance of information security, we have established and will implement, maintain, and improve our “SECURITY POLICY.”

Compliance with Laws and Regulations

We comply with laws, regulations, norms, guidelines, and contractual obligations related to information security.

Protection of Information Assets

We identify threats, vulnerabilities, and risks, and implement countermeasures to maintain the confidentiality, integrity, and availability of all information assets in our possession.

Implementation of Education and Training

We provide all employees with the necessary information security education and training to ensure that they are thoroughly informed of the importance of information security and its appropriate handling and management.

Measures in the Event of an Accident

We are committed to preventing information security accidents, such as leakage, loss, damage, or unauthorized use of information assets, and in the unlikely event of an accident, we will minimize the damage, promptly disclose necessary information, and take appropriate measures, including measures to prevent recurrence.

Responding to Changes in the Environment

We will review and strive to continuously improve our information security management rules and structures in consideration of changes in the business environment, changes in the social environment and legal systems, the latest trends in information-related technology, and newly discovered risks.