With the spread of the Internet and rapid advances in IT, medical equipment and services are also being exposed to the threat of cyberattacks. This document establishes the basic policy regarding information security for products and services developed and provided by OSADA CO.,LTD., OSADA ELECTRIC CO., LTD., and OSADA ELECTRIC CO., LTD. (NAGOYA FACTORY) (hereinafter referred to as the "OSADA Group").
1. Purpose
The OSADA Group is working on cybersecurity measures for its products and services to provide customers and patients with sound peace of mind.
2. Compliance with laws, ordinances, and guidance
When designing and developing products and services, the OSADA Group will establish standards for security measures that incorporate the requirements of relevant standards and guidance in accordance with applicable laws and regulations, and it will follow those standards.
3. A security management system for products and services
The OSADA Group will create a system to mitigate cybersecurity risks in its products and services and provide education and training on cybersecurity to its employees.
4. Establishment of secure design and development processes
The OSADA Group will design and develop products and services securely to mitigate vulnerabilities and risks. In addition, we will regularly review our standards for security measures and incorporate countermeasures against new threats in our products and services.
5. Vulnerability and incident responses
If a vulnerability that could harm customers or patients or that could affect the basic performance of the products or services is found in the OSADA Group's products or services (including third-party software such as OSes), the OSADA Group will take appropriate action in accordance with the lifecycle of those products or services.
6. Disclosure of information
The OSADA Group will provide information regarding product and service vulnerabilities, incident reports, the status of countermeasures, and recommended actions for customers to take, in accordance with the lifecycle of its products and services, and maintain and enhance the peace of mind of its customers. And to improve the reliability of the information provided to customers, the OSADA Group will promote the sharing of information with external organizations.
7. End of sales (EoS) and end of life (EoL) for products and services
The OSADA Group will provide customers with standard support for a certain period after the sales of a product or service ends and limited support once standard support ends. We will notify customers of the duration of support for each product on our website.
8. Providing safe products and services
The OSADA Group seeks to provide products and services that will allow customers to manage security risks.
9. Continuous improvement
The OSADA Group will continuously conduct activities, including maintaining and improving the security level of its products and services, in accordance with the basic policies set forth here.