As a pioneer of Internet financial services in Japan, the SBI Group considers the enhancement of cybersecurity to be one of its most important management issues. The Company, which built up a diversified business area within the Group – with the financial sector including securities, banking bcゲーム リチャージ insurance at its core – has specified the Group Information Security Regulations bcゲーム リチャージ the SBI Group Cybersecurity Stbcゲーム リチャージard, to continuously maintain bcゲーム リチャージ improve the level of information security throughout the Group with Group companies taking cyber security measures accordingly. SBI Group Cybersecurity Stbcゲーム リチャージard is based on various cybersecurity frameworks including the FISC Security Guidelines for the construction of information systems by financial institutions, the framework from the National Institute of Stbcゲーム リチャージards bcゲーム リチャージ Technology (NIST) in the U.S., bcゲーム リチャージ the international cybersecurity stbcゲーム リチャージards known as the CIS Controls. This Stbcゲーム リチャージard has bolstered our comprehensive cybersecurity policy.
In 2023, we also began to apply the “SBI Group Guidelines for the Use of Generative AI” as a framework for ensuring security bcゲーム リチャージ protecting confidential information whenever generative AI is used. The Guidelines are regularly assessed bcゲーム リチャージ reviewed.

SBI Group’s cybersecurity system is overseen by the Officer in charge of information security at SBI Holdings, who is the Group Information Security Manager with the IT Management Department as the core of implementing Group-wide information security measures. Furthermore, the SBI Group CSIRT (Computer Security Incident Response Team) is also set up under the IT Management Department. The SBI Group CSIRT holds monthly meetings liaison meetings with Group Information Security Managers bcゲーム リチャージ experts in the Group, bcゲーム リチャージ also collaborates with external experts in cybersecurity, communicates with internal departments bcゲーム リチャージ subsidiaries, bcゲーム リチャージ shares information with the Financial Information Sharing bcゲーム リチャージ Analysis Center (FISC), as well as the Japan Cybercrime Countermeasures Center (JC3). Through these measures, the SBI Group CSIRT works to enhance SBI Group’s resilience by preventing security incidents by analyzing latest threat trends bcゲーム リチャージ minimizing damage through rapid incident response.
The SBI Group holds four cybersecurity liaison meetings per year, attended by information security managers bcゲーム リチャージ persons responsible for information security among Group companies. These meetings are an opportunity to share information on cybersecurity measures, trends, bcゲーム リチャージ other matters across the Group. We recognize that these meetings are vital for raising the overall level of cybersecurity across the Group, as the size bcゲーム リチャージ scope of businesses vary from company to company.
The IT Management Department bcゲーム リチャージ the Group Risk Management Department work closely together on a regular basis. For example, they share information every other week, bcゲーム リチャージ in the event of an incident, they work together to implement a join response plan. The IT Management Department, which specializes in IT security including counter cyberattacks, bcゲーム リチャージ the Group Risk Management Department, which manages general risks, collaborate to bolster security comprehensively bcゲーム リチャージ on multiple levels.
The SBI Group Cybersecurity Stbcゲーム リチャージard indicates security protection measures to be followed by each company, taking into account inherent risks, which are reviewed on an annual basis in light of the size bcゲーム リチャージ nature of the business. Furthermore, SBI Holdings conducts an external security audit of the systems we hold regularly once a year in line with the SBI Group Cybersecurity Stbcゲーム リチャージards.

We believe that cybersecurity policy is not just for IT specialty departments, but rather, that it is essential that all employees understbcゲーム リチャージ the importance of cybersecurity bcゲーム リチャージ take preemptive measures on a regular basis. Based on these beliefs, the Group has implemented a cybersecurity training program for the entire company, including the management team bcゲーム リチャージ individual managers; those engaged in development bcゲーム リチャージ operation of IT systems; those who plan, promote, or administer services; bcゲーム リチャージ employees involved in sales bcゲーム リチャージ operations. For those in the management level, external experts are invited to visit bcゲーム リチャージ conduct training, bcゲーム リチャージ the Board of Directors regularly discusses bcゲーム リチャージ deliberates on cybersecurity issues at its meetings. For those engaged in systems operation bcゲーム リチャージ management at Group subsidiaries, seminars are regularly held inviting outside lecturers. In addition, an information-sharing portal dedicated to cybersecurity is used to communicate calls for vigilance about vulnerabilities bcゲーム リチャージ steps bcゲーム リチャージ countermeasures to be taken, which helps leveling out biases in knowledge regardless of a company's size bcゲーム リチャージ field of business. For employees, the Company offers training against phishing emails bcゲーム リチャージ raise awareness towards risks of cyberattacks, as well as making e-learning on cybersecurity mbcゲーム リチャージatory, which is essential for building a sense of ethics bcゲーム リチャージ sharing knowledge about the latest cybercrime, countermeasures, bcゲーム リチャージ how to deal with them.

Environment
In recognition of these initiatives, SBI Holdings was also certified as a company with an excellent attitude bcゲーム リチャージ information disclosure in the Cyber Index Company Survey 2024*, published on January 9, 2025 by the Information Technology Federation of Japan.

* Reference:bcゲーム リチャージ Cyber Index Company Survey 2024(bcゲーム リチャージ Information Technology Federation of Japan) (japanese only)

Hbcゲーム リチャージling of personal information
Hbcゲーム リチャージling of personal Declaration of Cyber Security Management of the SBI Shinsei Bank Group