Information Security
Initiatives

Information System Security Measures

As part of measures to prevent the leakage of confidential data, we ensure that critical information is stored using a dedicated, access-controlled system with reinforced security and auto-recorded user activity. In addition, we have established an environment in which employees can safely access the company’s information assets from outside the office, and we also carefully manage email attachments as well as the taking of company computers and storage media offsite.

As a measure against cyber-attacks, we use monitoring systems to identify any suspicious emails with possible malware attachments. We also monitor unauthorized online communications from internal sources to try and prevent attacks from causing more widespread damage.

In addition, we have participated each year since 2017 in cyber-attack response training (NISC*/NCA affiliated cross-field company-wide training), in order to strengthen our system for countering obstructions.

• * National center of Incident readiness and Strategy for Cybersecurity.

Security Measures for Production Facilities

Canon implements security measures for its production facilities to ensure malware, cyberattacks or other information security issues do not reduce productive capacity or otherwise disrupt production plans.

In the past, corporate mainframes or online information systems were the major targets for cyberattacks. Today, the growing use of off-the-shelf OS software and IoT means that production facilities attract the same level of information security risk. A separate approach is needed for production systems because production lead-times are longer than the customer support periods for off-the-shelf OS software. To ensure that Canon Inc. and Group manufacturing companies in Japan and overseas do not have to suspend operations due to a virus infection or similar attack, we also monitor the networks linked to important facilities and production lines for any unauthorized activity.

We also conduct security audits of production facilities to maintain a safe production environment.

Product/Service Security Measures

Canon is engaged in initiatives to prevent any cyber-security risks with products or services before they appear. In addition, our systems are designed to try to minimize the customer impacts if a cyber-security incident occurred.

Product/Service Security Measures

Security Measures for Supply Chain

Risks have grown in recent years of an attack against one part of the supply chain impacting the entire chain, leading to interruptions in the supply of products and services or the leaking of confidential information.
In turn, this could result in economic losses, the loss of credibility and brand value, or other negative outcomes.

To mitigate such risks, Canon Inc. is promoting to eliminate information security risks throughout the entire supply chain by the cooperation of suppliers in information sharing and other activities.