Governance
Risk Management and Information Security

The OLC Group works to prevent and respond to a wide range of business risks in accordance with the OLC Group Risk Management Guidelines.

We have installed a Risk Management Committee to promote effective risk management as standard practice. The Committee identifies, assesses, oversees, and manages our risks by categorizing them into strategic risks*1 and operational risks*2,

 

*1 Risks that exert a material impact on the sustainability of business
*2 Risks that exert a material impact on the execution of business
 

The Risk Management Committee reports its risk management status to the Executive Committee and the Board of Directors to confirm the effectiveness of our risk management.
 

The Emergency Control Center (ECC) is set up to determine how to address an emergency situation as it arises. All the OLC Group companies are mandated to swiftly report any identified situations that need to be controlled urgently.

To be prepared in the event of an earthquake, we have in place the Basic Plan of Earthquake Countermeasures, which describes our plans regarding supplies and materials as well as first-aid care. Based on the Basic Plan, we have also prepared a response manual indicating the action to be taken by each department.

The OLC Group has set up the Emergency Control Center (ECC) as the organization that supervises response in an emergency such as an earthquake, fire, or typhoon to minimize damage to people and property, enabling the swift resumption of operations. Given the Great East Japan Earthquake in March 2011 and the global spread of COVID-19 since 2020, we have formulated our Business Continuity Plan (BCP) in anticipation of large-scale disasters.

 

Following the Great Hanshin-Awaji Earthquake in January 1995, we have undertaken risk finance initiatives as appropriate with the aim of securing liquidity on hand to continue business. This financial preparedness played a part in enabling us to continue business and achieve a rapid recovery in performance following the Great East Japan Earthquake and during the COVID-19 pandemic. Our current policy on financial preparedness for earthquakes and other disasters is to use a portion of cash on hand to secure the funds necessary to continue business operations.

The OLC Group Basic Policy on Information Security lays out the basic policy and procedure for information management. Specific guidelines for action are set forth in the OLC Group Information Security Policy, and we are developing an information security management system that conforms to this policy. The Information Security Management Subcommittee is established under the Risk Management Committee as an organization supervising information security. Chaired by the officer in charge of the Risk Management Department, the sub-committee works to raise the level of information security management within the OLC Group by monitoring compliance with the OLC Group Information Security Policy, developing plans for employee training and awareness programs, and implementing training programs on measures against cyberattacks.
Furthermore, we established the OLC Group Guidelines on Social Media, which set forth rules for managing and communicating information through social media, as well as regulations for using generative AI. The purpose of these guidelines is to enhance the OLC Group’s information security management standards.

The OLC Group ensures that customers' and guests' personal information is protected. The handling of personal information is periodically checked by the departments in charge, as well as audited by other departments.