Information Security Basic Policy

Japan Blockchain Foundation Co., Ltd. (hereinafter referred to as "the Company") is committed to protecting its information assets and the information assets entrusted to it by customers from threats such as accidents, disasters, and crimes, and to earning the trust of customers and society by implementing information security throughout the company based on the following policies.

In carrying out activities that contribute to the group's founding objectives, the Company will build information security that enables employees to work freely and openly while fulfilling necessary social responsibilities.

The Company provides infrastructure to financial institutions, and the importance of maintaining the reliability of this business is extremely significant not only to customers but also to society. The Company's greatest responsibility is to maintain customer information confidentiality at a high standard and to maintain an extremely stable information system environment for customers to use. Furthermore, all employees must recognize that the operation and management of the Company's consortium-type blockchain is based on the trust of customers and society.

To fulfill these responsibilities placed upon the Company, we establish this Information Security Basic Policy and require all relevant parties to act in accordance with the established policies. The policies are defined below.

We will establish an organization in which management participates to promote and improve information security activities. We will also define roles and responsibilities for information management and ensure the complete operation of the information security management system.

The Company's employees shall comply with the information security policy and related laws, regulations, and contractual obligations, and act responsibly.

We will establish criteria for risk assessment, identify risks to information assets, and implement risk response plans.

To protect information entrusted to the Company by customers and to continue business operations, we will strictly protect information processing facilities and related equipment from accidents, disasters, and external interference.

The information security management system will be continuously reviewed, its effectiveness evaluated, and improvements made as necessary. Internal audits will also be conducted continuously to clarify compliance with established rules.

We will establish emergency measures in the event of accidents or disasters affecting the services provided by the Company, and take measures to continue business operations without delay.

In the event of violations of laws and regulations related to information security, contract violations, or accidents, we will respond appropriately and strive to prevent recurrence.

The ISMS Committee will lead in setting and monitoring information security goals for all departments to ensure the implementation of initiatives.

We will provide education and training on basic information security policies, related standards, and procedures to all employees involved with information assets within the scope of application, in order for them to have the competencies necessary for their work.

Established: June 1, 2024

Japan Blockchain Foundation Co., Ltd. Representative Director and President: Hidekazu Kondo