NTT-CERT provides security support for NTT Group companies
NTT-CERT, operated by the NTT Information Sharing Platform Laboratories, is an organization that works with security managers and systems administrators to handle security threats and provide technological support within the NTT Group.
In fiscal 2008, we adopted a diagnostic security risk management system that we had been developing since fiscal 2006. We have also been engaged in planning and implementing security training programs for employees, and enhancing cooperation between telecommunications equipment security engineers within the NTT Group.
This point is about one fifth of the way down the page.
ISMS and PrivacyMark certifications
As a framework for managing information, protecting secrecy, and preventing information leaks, NTT Group companies are working to achieve Information Security Management System (ISMS) certification. We are also working to achieve PrivacyMark (P-Mark) certification, which recognizes the provision of a system for proper handling of personal information.
Further, NTT DATA has achieved a first for domestic system integrators by publishing an Information Security Report 2008, which reports the details of its activities for promotion of information security.
Information Security Report
This point is about two fifths of the way down the page.
Initiatives for protecting customers' personal information
The NTT Group has established an NTT Group Information Security Policy that states its position on information security, and is doing its utmost on a groupwide basis to protect the personal information of its customers and prevent leaks. Each Group company is also undertaking its own activities to ensure thorough protection of personal information.
| Group company | Examples of major activities |
|---|---|
| NTT East |
|
| NTT West |
|
| NTT Communications |
|
| NTT DATA |
|
| NTT DOCOMO |
|
| NTT FACILITIES |
|
| NTT COMWARE |
|
| NTT Urban Development |
|
This point is about three fifths of the way down the page.
Enhancing measures to stop information leaks and prevent reoccurrence
In fiscal 2008, several information leak incidents occurred, such as the external leakage of business-related files removed from company premises without authorization by a former employee (NTT East), and the use, perusal, and external leakage of customers' personal information by a retail agency staff member (NTT DOCOMO). Group companies take such incidents very seriously and have strengthened measures to prevent a reoccurrence, such as by redoubling their efforts to train employees in the proper handling of information, and introducing software to prevent the leak of confidential information.
This point is about four fifths of the way down the page.
Provision of confidential document recycling service
A lockable security box called an "SS-BOX" is installed in customers' offices, and after confidential materials are discarded, the locked box is taken to a processing plant where the contents are completely destroyed (dissolved). A "confidential document destruction (dissolution) certificate" is issued after processing.
Confidential document destruction (dissolution) certificate
This is the end of the text.Return to the CSR main menu.


