Group-Wide Risk Management System
The Kajima Group conducts Group-wide activities to eliminate or reduce risks in corporate activities.
The Management Committee and special-purpose committees ascertain business risks and deliberate on countermeasures, including for new businesses and real estate development investments.
With respect to operational risks such as those related to legal or regulatory compliance violations, the Compliance and Risk Management Committee (chaired by the President) ascertains and evaluates the operational status of the Group’s risk management system, deliberates on risk management policies and responses to major risks, and reports as necessary to the Board of Directors.
The Risk Management Liaison Committee, which comprises the persons in charge at the Head Office department responsible for risk management, meets regularly to report and share information pertinent to the Group on risks that have materialized, revisions to laws and regulations, social trends, circumstances at other companies, and risk management and communication methodologies, and reports important information to the Compliance and Risk Management Committee as appropriate.
Domestic and overseas Group companies adopt standardized systems in line with those of Kajima, and they independently introduce risk management initiatives in collaboration with Kajima.
Risk Management Framework
The Kajima Group handles a wide range of information, including that relating to buildings, customers, management, technology, intellectual property and personal information, in the course of providing various services, including design and construction. The Group adheres to an information security policy and conducts thorough risk management in order to protect such information, including from external attacks or leakage due to negligence.
Employees throughout the Group take an annual online course in information security, and education and training topics include risks associated with the use of cloud services and new threats such as targeted cyber-attacks, which have increased in recent years.
For partner companies, Kajima also distributes standard check sheets, awareness posters, and educational materials provided by the Japan Federation of Construction Contractors. The Company is working to improve the level of information security at its partners.
Kajima is addressing today’s increasingly diverse and sophisticated cybersecurity threats in accordance with the Cybersecurity Management Guidelines from Japan’s Ministry of Economy, Trade and Industry. The Company has set up the Kajima Security Incident Response Team (K-SIRT※1), a member of the Nippon CSIRT Association. The team stays on top of the latest trends in computer security and cyber-attacks, cooperating on a regular basis with other organizations and CSIRT teams. Kajima is also strengthening its protection and detection measures, as well as systems for monitoring for unauthorized access, computer viruses and other events, and quickly addressing all potential threats to minimize potential damage. In addition, it has developed protection, detection and monitoring systems to deal with the teleworking environment and other new work styles.
※1 KAJIMA Security Incident Response Team
Information Security Management Framework
Multi-Hazard Business Continuity Plan (Natural Disasters, Pandemics, etc.)
When a major earthquake, wind or flood damage, or other natural disaster occurs, the construction industry must quickly mobilize to ensure business continuity and the rapid recovery of vital social infrastructure, including the reopening of roads and the repair of bridges.
As a member of the Japan Federation of Construction Contractors that receives requests from the Government of Japan, Kajima operates and updates a BCP and conducts regular drills to prepare for contingencies. The Company has earned the Business Continuity and Disaster Recovery Certification for Construction Companies2 and Resilience Certification3.
2. A program offered by the Kanto Regional Development Bureau under the Ministry of Land, Infrastructure, Transport and Tourism to evaluate and certify the basic business continuity capabilities of construction companies.
3. With the aim of enhancing disaster preparedness in Japan, this program provides certification to entities that are actively engaged in business continuity efforts. They are certified as organizations that contribute to national resilience by being prepared for large-scale natural disasters.
Kajima is also enhancing its cooperation with local governments and public infrastructure operators via disaster preparedness agreements to support recovery after a disaster, as well as preparing Group-wide frameworks capable of rapidly responding to foreseeable disasters such as wind and flood damage.
In response to the COVID-19 pandemic, the Group positioned preventing the spread of infection as a top priority, and was quick to establish a Crisis Response Headquarters. In order to ensure business continuity and minimize damage to the greatest extent possible, the Group is gathering information, assessing risk scenarios, instructing employees in Japan and overseas on actions to take, providing guidance to partner companies, and implementing other necessary measures.
Addressing Risks Outside of Japan
Kajima has established an International Emergency Response Committee to oversee the Group’s response and ensure the safety of employees and their families when emergencies arise outside of Japan. In the event of a terrorist attack, major earthquake or other disaster outside of Japan, Kajima focuses first on gathering information to verify the safety of employees and their families and next on providing aid to the affected area.
Kajima has compiled a manual on preparedness measures and emergency response in areas where it operates and is currently educating employees on assignment outside of Japan on these topics, as well as providing information and alerts on security, epidemics and other concerns to employees traveling internationally.