Fair Business Conduct / Information Security

Sustainability
Management

Material ESG Issues

Fair Business Conduct / Information Security

Sustainability Areas

Priority Actions

PolicyGRI: 2-23

As a corporate enterprise that conducts business based on public trust, the Fuji Oil Group regards fair and honest business operations and the proper management of information as essential foundations of our corporate management. We established the Fuji Oil Group Management Philosophy* in October 2015 as our moral compass, defining the values and code of conduct that all officers and employees are expected to uphold in their business activities.
Guided by the Fuji Oil Group Three Principles of the Code of Conduct developed in February 2003, we commit to complying with laws, regulations and social norms, conducting business fairly, and engaging in equitable business practices, thereby fulfilling our responsibilities to contribute to public interest as a trusted member of society. Furthermore, as our business experiences greater globalization and digitalization, we recognize information security as a vital management foundation supporting our corporate activities. Ensuring robust information security is essential to our business continuity and to maintaining public trust.
Our Group remains committed to enhancing its corporate value through highly transparent and reliable management.

Fuji Oil Group Three Principles of the Code of Conduct (Developed in February 2003)

  • Follow the rules.
    Observe the laws and regulations applicable in the respective countries and regions.
    Act according to the rules and procedures established by the company.
    Follow social norms and live up to society’s expectations and trust.
  • Act honestly.
    Act on one’s own conscience.
    Do not hide one’s mistakes or failures.
    Give reports and explanations which are properly based on the facts, and in a timely manner.
  • Act fairly.
    Engage in fair and proper transactions.
    Draw a line between public and private matters and do not commit any illegal conduct.
    Respect the human rights of the people involved in business activities and consider racial, gender, and religious sensitivities.
    Do not do anything that may lead to constraint, bribery, or any other form of corruption.
    Do not allow any antisocial forces to intervene and disrupt the workplace.

GovernanceGRI: 2-12,2-13,2-14,3-3

Our Group established the Sustainability Committee*1 as an advisory body to the Board of Directors chaired by the President and Chief Executive Officer (CEO). From a multi-stakeholder perspective, the committee deliberates on and monitors priority actions on material ESG issues in light of the medium- to long-term impacts of sustainability-related risks and opportunities on business and corporate value, and makes recommendations to the Board. Furthermore, we appointed a Chief Officer for each priority action to drive initiatives based on policies, strategies, and metrics and targets.*2 We also have a framework for continuous monitoring of the progress of these initiatives by the Sustainability Committee and the Board of Directors.

Table: Chief officer in charge of each priority action

Priority action Chief officer in charge
Information Security Management Senior Executive Officer, Chief Financial Officer (CFO), and Head of Information and Communication Technology Division
Operation of a Trustworthy Whistleblowing System Senior Executive Officer, Chief Financial Officer (CFO), and Head of Legal Division
Promoting Fair Business Practices

Operation of a Trustworthy Whistleblowing System / Promoting Fair Business Practices

Under the oversight of the chief officer in charge listed above, the Legal Division takes the lead in planning various measures to increase compliance awareness and works to address compliance issues and take corrective action throughout the Group. The Division also reports on these compliance-related initiatives to the Board of Directors as needed, as part of the Board of Directors’ oversight of the corporate governance system.

Information Security Management

Under the oversight of the chief officer in charge listed above, we designated an Information Officer and established a Computer Security Incident Response Team (CSIRT). Additionally, each Group company appoints an information management director and information security manager. With the advice of external experts, the CSIRT is systematically working to raise the level of information security in collaboration with information management directors and information security managers across all Group companies.

StrategyGRI: 3-3

Strategy for strong governance through fair business conduct and information security

Our Group positions Fair Business Conduct and Information Security as sustainability areas and core pillars of the governance framework that supports our business continuity and medium- to long-term corporate value. Recognizing compliance violations, misconduct, and information security incidents as significant risks to our management foundation and public trust, we consider it essential to establish a system that can actively prevent these risks and minimize their impacts should they occur.
To date, we have strengthened the effectiveness of our risk management by establishing management structures and raising awareness through education, training, and audits. In Fair Business Conduct, we have worked to enhance trust in our whistleblowing system and to foster a compliance mindset aligned with our global business operations. In Information Security, we have focused on advanced IT security measures and personnel training to prevent security incidents and minimize their impact on our operations.
Going forward, we will continue working to achieve stable and sustainable business operations through fair and transparent corporate activities and robust information management. We will also strive to strengthen our risk management system and maintain or deepen the trust placed in us by society through continuous improvements in education and training.

Strategy Matrix

Fuji Oil Group’s Approach

Reasons for importance Initiatives to enhance business capital
  • Practicing fair and transparent corporate activities forms the very foundation of our Group as a trusted member of society.
  • In an increasingly uncertain business environment, building resilience is essential.
  • Establishing strong business operations capable of withstanding diverse risks is vital.
  • Information security risks pose a serious threat to our management foundation.
Natural capital -
Social and relationship capital
  • Provide transparent disclosures.
  • Build networks that foster stakeholder trust.
Direction of initiatives Manufactured capital -
  • Take preventive measures against risks by strengthening BCP and information security, and ensuring fair business conduct.
  • Establish systems that can minimize impacts should risks materialize.
  • Develop Group governance and enhance the capacity to respond to unforeseeable crises.
  • Aim to increase corporate value sustainably.
Intellectual capital -
Human capital
  • Develop individual talent while fostering a corporate culture where employees find Hataraki-Gai (job satisfaction).
  • Ensure compliance with laws and regulations and strengthen the compliance system.
  • Create a safe and secure work environment for employees.

Strategy

Priority action Information Security Management Operation of a Trustworthy Whistleblowing System Promoting Fair Business Practices
Risks
  • Fines for violating Japan’s Personal Information Protection Act; reduced profitability and erosion of corporate value due to operational shutdowns and lost opportunities caused by cyberattacks
  • Leaks of misconduct on social media due to failure of the whistleblowing system, resulting in long-term reputational damage
  • Reduced profitability and erosion of corporate value due to violations of laws and regulations in various countries or regions, or due to criminal or civil penalties
Opportunities - - -
Financial impact of risks and opportunities Short-term High High High
Medium-term High High High
Long-term High High High
Value chain Upstream - ● ●
Group ● ● ●
Downstream - ● -
Vision and goals
  • Build a system to address IT security risks that have a significant impact on business management, and strengthen countermeasures, to support the sustainable development of the Group
  • Conduct fair and transparent business operations as a trusted company for all stakeholders
Environmental and social impacts Negative impacts to be reduced
  • Reduced profitability due to operational shutdowns and lost opportunities caused by cyberattacks
  • External damage or loss caused by information leaks
  • Corruption, bribery, anti-competitive behavior, and other violations of laws and regulations
  • Damage to social reputation and serious human rights and safety issues due to failure of the whistleblowing system
  • External damage or loss caused by information leaks
  • Corruption, bribery, anti-competitive behavior, and other violations of laws and regulations
Positive impacts to be created - - -
Connection to key policy of the medium-term management plan
  • Enhance governance
  • Enhance governance
  • Enhance governance

Risk management

Our Group systematically manages risks and opportunities related to Fair Business Conduct and Information Security by positioning them within our group-wide risk management framework and aligning them with our Group significant risks. More specifically, we first classify these risks and opportunities under the relevant risk types — legal and ethics, and information system. Then, we define and assess them in terms of their impacts on our business strategy, business continuity, and the entire supply chain. This approach enables us to integrate risks and opportunities linked to fair business conduct and information security into our business strategy, business continuity, and governance. In this way, we implement effective risk management.

The risk management responses for each priority action are described in the section on priority actions below.