Information Security

Fiscal 2024 Objectives	Fiscal 2024 Achievements	Self-Evaluation	Priority Objectives for Fiscal 2025
Pass the recertification and transition screening for ISO/IEC 27001 Continue training and education on targeted email attacks (in Japan and overseas) Add cybersecurity measures to IT general control requirements	Maintained ISO/IEC 27001 certification (renewed June 17, 2024) Conducted training and education on targeted email attacks (for all employees in Japan and at 33 overseas sites) Added cybersecurity measures to IT general control requirements	★★	Pass the recertification and transition screening for ISO/IEC 27001 Continue training and education on targeted email attacks (in Japan and overseas) Review information security-related rules Improve and maintain security using vulnerability assessment tools

Self-evaluation: ★★★ Achieved more than targeted / ★★ Achieved as targeted / ★ Achieved to some extent

Sharp is working to ensure information security by setting forth a Global Basic Policy on Information Security for the safe and appropriate management and use of information and information systems.

As part of its efforts to enhance information security, Sharp also acquired ISO/IEC 27001 certification in 2015 and has secured an appropriate information security management system. In addition, some of Sharp’s domestic sales companies and overseas bases (in the US, UK, Sweden, and others) have also acquired and maintain ISO/IEC 27001 certification.

Summary of ISO/IEC 27001 Certification Activities

Organization	Sharp Corporation
Scope of Certification	The administration and operation of an affiliated web site. The implementation of in-company information management.
Certification Number	IS 635826
Certification Body	BSI Group Japan K.K.
Initial Certification Date	June 30, 2015

Related Information:

Global Basic Policy on Information Security

Information Security Measures

Last year, an information security incident occurred on Sharp’s official online store, Cocoro Store. Sharp takes this situation very seriously and is currently reviewing its measures in order to further strengthen company-wide information security.

To prevent such incidents from ever happening again, Sharp is conducting vulnerability checks and implementing intrusion prevention measures on all its publicly accessible websites to prevent information leaks. Sharp is also scoring the security status of each site and implementing measures according to severity. It will continue to carry out these measures on a regular basis to improve and maintain security.

Furthermore, as Sharp pursues company-wide digital transformation, it is reviewing related rules to ensure that information security does not fall behind. Through these reviews, Sharp aims to improve business efficiency while maintaining a secure environment.

In addition, because targeted email attacks remain a major risk, Sharp will continue to conduct training using simulated email attacks as a defense against them. In fiscal 2024 as well, Sharp tested its response capabilities by having not only all employees at Sharp and its affiliates in Japan but also employees at overseas affiliates receive several types of malicious emails that mimicked real-life ones. Employees who did not deal with the email appropriately were given further guidance on the dangers of email attacks to raise their security awareness.

Sharp is committed to ensuring information security as its number one priority in order to lay a foundation for sustained growth. Moving forward, Sharp, as a whole, will continue to carry out security measures that will help ensure that it is a safe and reliable company.