PDF［166KB］
Prestige International Inc. (headquarters: Chiyoda-ku, Tokyo; CEO: Shinichi Tamagami; hereinafter “PI”) is pleased to announce that it has successfully completed the transition audit and obtained the JIS Q 27001:2023 certification for its Information Security Management System (ISMS) based on the previous JIS Q 27001:2014.
In this transition audit, PI was highly recognized for the enhancement of its cybersecurity measures, information security evaluation system, and strengthened response strategies to various risks associated with its business activities. In addition, Iwate BPO Fortress was added to the scope of registration as a BPO center.
| Name of Organization |
Prestige International Group |
| Name of Organization Departments |
Prestige International Inc.
Prestige Core Solution inc.
Prestige Global Solution inc.
Premier IT & Process Management Inc.
Premier Assist Network Inc.
Prestige Human Solution Inc.
Premier Aid Inc. |
| Coverage Centers |
Main Center:
Akita BPO Main Campus
Other Centers:
Akita BPO Yokote Campus
Akita BPO Nikaho Campus
Yamagata BPO Park
Yamagata BPO Park Tsuruoka Branch
Toyama BPO Town
Niigata BPO Uonuma Terrace
Iwate BPO Fortress
|
| Certification Criteria |
JIS Q 27001:2023(ISO/IEC 27001:2022) |
| Certification Authority |
JUSE-ISO Center |
Details by ISMS-AC
https://isms.jp/lst/ind/CR_JUSE-IR-237.html
In addition, within the framework of ISMS, the Company is actively promoting the following initiatives.
Practical measures
1 Enhance risk and vulnerability assessments
1.1 Establish a new assessment system that includes vulnerability assessments and log analysis, and begin rapid response by a dedicated team.
2 Enhance cybersecurity risk response
2.1 Detect attacks early and respond quickly by capturing and analyzing security audit logs.
2.2 Implement automated responses (defense, detection, containment, investigation, and remediation) that consider the entire cyber kill chain by strengthening endpoint protection. Thoroughly implement security measures for each endpoint and implement measures to reduce the risk of unauthorized access.
2.3 Improve the security of the authentication process by implementing multi-factor authentication and establish a comprehensive defense system against risks such as account hijacking. Manage climate change activities as part of the ISMS.
3 Establishment of an information security evaluation system for cloud services
3.1 By expanding cloud security support, which had been only evaluated within the scope of TISAX certification, to the entire company, and clarifying the process from the start to the end of use of cloud services, the overall safety improvement is achieved.
4 Strengthen activities to prevent data leaks
4.1 To further enhance current environmental measures, we have added and strengthened measures to prevent data leaks, including PAPP measures and DLP measures, and we are working to prevent unauthorized access risks and data leaks by periodically analyzing vulnerability assessments and logs.
5 Management of climate change measures within the framework of ISMS
5.1 By integrating climate change measures into management processes and conducting regular internal audits and management reviews, the status of initiatives is assessed and necessary improvement measures are formulated and implemented. This further strengthens our response to climate change risks and aims for sustainable growth for the entire business.
The acquisition of this certification and the promotion of various measures to strengthen it will contribute to enhancing the risk management system and enhancing the robustness of information security in our group.
We will continue to strive to secure the trust of our customers and clients while responding flexibly and promptly to changes in the global environment.
Information Security Initiatives of the PI Group
https://www.prestigein.com/english/sustainability/governance/riskmanagement/security/