Basic Information Security Policy

September 26, 2025
Nihon Dempa Kogyo Co., Ltd.
Hiromi Katoh
Representative Director and President

NDK Group aims to create a safe, secure, and comfortable future for digital society by delivering highly reliable and high-precision products based on our Corporate Philosophy. The realization of this vision requires the proper management of all information assets related to our business activities, which we recognize as one of our critical management priorities. In accordance with the following Basic Information Security Policy, NDK Group will work collectively to maintain and enhance information security.

1．Scope of Application

This policy applies to all information assets managed by NDK Group, including information related to customers, business partners, and employees, as well as information associated with internal development and sales activities, and the information systems used to process such information. Furthermore, this policy applies to all members of NDK Group who handle information assets, including directors, full-time employees, contract employees, part-time employees, temporary employees.

2. Compliance with Laws and Regulations

NDK Group will comply with all applicable laws and regulations pertaining to information security, as well as contractual obligations with our customers and business partners.

3. Information Security Measures

NDK Group implements comprehensive information security measures based on international standards such as ISO/IEC 27001 and industry frameworks such as VDA-ISA. These measures address human, physical, and technical aspects to protect all information assets from potential threats and to ensure confidentiality, integrity, and availability. We also require external parties and former affiliates who handle or have handled our information assets to comply with these measures.

4. Information Security Management System

NDK Group establishes an Information Security Committee to plan, operate, and improve information security initiatives. The committee oversees NDK Group's information security management, conducts risk assessments, identifies issues, implements controls, and promotes efforts to monitor and improve the operational status of information security.

5. Education and Training

NDK Group will provide continuous education and training to all relevant members to raise awareness of the importance of information security and to ensure proper use of information assets.

6. Continuous Improvement

NDK Group will regularly evaluate compliance with this policy and the proper handling of information assets and will strive for continuous improvement of its information security management system.

7. Response to Information Security Incidents

NDK Group will take prompt and appropriate action if an information security incident, including any violation of laws or regulations, occurs, and will take measures to minimize its impact. We will also investigate the root cause of the incident and implement measures to prevent recurrence.