Throughout the entire Hitachi Group, including companies in business reorganizations and companies integrated as a result of M&As, we are working to ensure security, compliance, and business continuity for internal IT.
To respond to the risk of information leaks and increasing cyberattacks, as well as to ensure proper use of software, we are continuing our efforts to strengthen our IT controls.
Aiming to reduce internal IT risks, we have established essential requirements for IT controls and IT architecture for BUs#1 and Group companies
as IT rules and standards to achieve information security, IT compliance, and business continuity.
In supporting global business through internal IT, we must ensure that requirements in areas such as information security, IT compliance, and business continuity are met, and we must reduce both IT risks and IT costs. The Hitachi Group includes BUs and Group companies of various sizes and in various industries, located all around the world, making it important for us to define requirements that can be incorporated consistently for effective governance at all of these organizations.
For this reason, we have defined certain IT principles that serve as universal rules acceptable within the IT departments of all BUs and Group companies, regardless of region, type of business, or size. In addition, the essential requirements for IT controls, which are focused on measures to mitigate IT risks, and the IT architecture, which forms the basis of IT standardization, are defined as IT rules and standards common to the Hitachi Group. Furthermore, including providing IT services that conform to these standards and performing verification thorough internal audits, we have established and are using the Hitachi Group IT controls framework, which is a mechanism for ensuring IT governance throughout the entire Hitachi Group.
Hitachi Group IT controls framework
