Integrated management by the officer responsible for risk management and the information security committee

A framework for continuously promoting company-wide risk management by combining the appointment of an officer responsible for risk management, risk management policies and training, and the operation of an information security committee.