Information Security

Fiscal 2025 Objectives	Fiscal 2025 Achievements	Self-Evaluation	Priority Objectives for Fiscal 2026
Pass the recertification and transition screening for ISO/IEC 27001 Continue training and education on targeted email attacks (in Japan and overseas) Review information security-related rules Improve and maintain security using vulnerability assessment tools	Maintained ISO/IEC 27001 certification (renewed August 4, 2025) Conducted training and education on targeted email attacks (for all employees in Japan and at 26 overseas sites) Reviewed information security-related rules (24 related rules reviewed and implemented) Improved and maintained security using vulnerability assessment tools (124 assessments conducted)	★★	Maintain ISO/IEC 27001 certification through surveillance audits Implement initiatives to comply with METI’s Supply Chain Security Assessment Scheme Continue training and education on targeted email attacks (in Japan and overseas) Review information security-related rules and implement company-wide training

Self-evaluation: ★★★ Achieved more than targeted / ★★ Achieved as targeted / ★ Achieved to some extent

We are working to ensure information security by setting forth a Global Basic Policy on Information Security for the safe and appropriate management and use of information and information systems.

As part of our efforts to enhance information security, we also acquired ISO/IEC 27001 certification and have established an appropriate information security management system. In addition, some of our domestic sales companies and overseas sites (in the UK, Sweden, and others) have also acquired and maintain ISO/IEC 27001 certification.

Summary of ISO/IEC 27001 Certification Activities

Organization	Sharp Corporation
Scope of Certification	The administration and operation of an affiliated web site The implementation of in-company information management	The development and operation of cloud solution services (SaaS)
Certification Number	IS 635826	JQA-IM1680
Certification Body	BSI Group Japan K.K.	Management System Division, Japan Quality Assurance Organization
Initial Certification Date	June 30, 2015	February 7, 2020

Related Information:

Global Basic Policy on Information Security

Information Security Measures

At Sharp, we consider ensuring information security to be one of our most important management priorities. The risks surrounding information security are diversifying, including not only software vulnerabilities and unauthorized access but digital transformation-associated operational risks, human factor-related risks, and more. To address these challenges, we are working to promote risk-based security measures under a company-wide governance framework.

To address software vulnerabilities and unauthorized access, we regularly conduct vulnerability assessments and implement other security measures for our publicly accessible websites. Furthermore, we conduct information security risk assessments for these websites, identifying risks and implementing countermeasures based on the assessment results to ensure the effectiveness of our measures.

To address operational risks, we are continuously reviewing our information security-related rules and, as part of our efforts to strengthen cybersecurity, implementing measures based on the zero-trust concept and introducing and utilizing various security tools.

To address risks caused by human factors, we are continuing to conduct training for employees that simulates targeted email attacks, as we did last year. Based on the training results, we provide follow-up support to employees who require additional guidance, helping them better understand the risks of cyberattacks and prevent recurrence, thereby reducing overall risk.

Going forward, we will continue to review these initiatives, promote the establishment of risk reduction behaviors throughout the organization through company-wide training, and work to further strengthen information security measures, and maintain and enhance a safe and reliable corporate foundation.