[Priority issue 1] Raise Compliance Awareness and Ensure Risk Management: "Outline of Activities in FY2014: Risk Management"

Fujifilm has been implementing countermeasures against companywide risks, which we identified based on the risks faced by each division and set as common issues. In FY2011, in response to the Great East Japan Earthquake and the disaster scenarios envisioned in the event of an eruption of Mount Fuji, an earthquake occurring directly under the Tokyo Metropolitan Area or a massive interrelated earthquake (Tokai, Tonankai and Nankai earthquakes along the Nankai trough), we reviewed its companywide risks to supplement and strengthen its countermeasures.

In FY2014, we conducted training for the risk managers in each Group organization to raise our risk management awareness and capabilities to deal with such risks. We are also enhancing the measures for employees visiting or living in developing countries on business as part of our effort to strengthen risk management for the safety of employees outside Japan (see page 51). Further, all employees were given E-learning opportunities to maintain and increase their information security levels and deepen their understanding of information security rules and guidelines on specific activities to be undertaken.

Fujifilm will continue to identify priority risk issues through the PDCA cycle and formulate and implement specific action plans.

Fuji Xerox places a priority on actively managing risk, not just in emergencies, but also in its daily business operations, based on ALL-FX Risk Management Rules. Potential risks are managed based on occurrence frequency and impact on management. Responsibilities and authority, formulation and implementation of countermeasures are set out to each risk. In risk management, we select priority issues, with attention given to changes in social and business conditions, the status of our business operations, the occurrence frequency, impact on management, etc. Since the Great East Japan Earthquake, we have developed emergency response policy for major natural disasters and are continuously working on BCP reinforcement activities. As for the pandemic outbreak, the measures to the spread of contagious diseases are being implemented based on emergency response guidelines. In information security, we will focus on measures to targeted attacks and enhancement of the security management system of our service contractors.

We will work on improving the initial response to prepare for the occurrence of large-scale natural disasters and will continually enhance risk response to prevent information security risk.