Information Security

The evolution of the Internet has led to sharp rises in leaks of confidential information, infections by computer viruses and other serious social issues, and the harm suffered by companies from such incidents increasingly extends beyond direct damage, even resulting in the loss of public trust.

As a business operator responsible for social infrastructure, the Daigas Group recognizes the importance of managing customer information and other data. In August 2019, the Group launched the Cybersecurity Committee as one of its company-wide committees. Under the leadership of its subcommittee called the Information Security Subcommittee, it strives to step up information security measures.

Under the leadership of the Information Security Subcommittee, the Daigas Group has established a system to enhance its overall information security by deploying managers in charge of promoting information security at core companies of the Daigas Group and organizations in charge of supporting the management of Osaka Gas and by deploying staff in charge of promoting information security at other organizations and affiliated companies.

In FY2022, we worked to strengthen information security measures through the establishment or revision of the internal rules for the Daigas Group, including the Information Security Guidelines. In addition to the existing content, we added and revised the Information Security Measures Standards based on recent security incidents that occurred inside and outside the company. We have been operating the telework guidelines, guidelines related to smart devices to respond to the expansion of the use of smart devices, and guidelines which compile the requirements that must be observed when using the cloud services, all of which were created in FY2021 and have been updated in light of the spread of telework.

Also, we conducted on-site surveys and checkups regarding information security at group companies, formulated improvement plans for each of these companies, and had them implement suitable measures. Education on security was also provided to all Daigas Group employees and employees in charge of IT at each affiliate and organization to improve the information security awareness and skills of each and every employee. To enhance employees’ information security awareness and enable them to respond appropriately to security incidents, we conducted simulation training on targeted email attacks, based on actual cases (for about 20,000 employees).

Moreover, the entire gas industry in Japan is working on security measures in line with the Action Plan on Information Security Measures for Critical Infrastructure, formulated by the National Center of Incident Readiness and Strategy for Cybersecurity (NISC). Osaka Gas, too, is striving to strengthen the measures.