Corporate Governance | Information Security

The information we have accumulated, including clients' personal information, is critical to our business activities and requires a rigorous system of controls.

Each group company has an information security policy and employee training and awareness programs are in place to keep information secure, and will continue to do its utmost to ensure the protection of client data.

Nomura Holdings, Inc. has established a new Group Information Security Committee so as to continue developing initiatives for information security measures at Nomura group companies, and is promoting a unified approach within the group.

Information Security Management

Appropriate management of client data is essential in order for the Nomura group to keep the trust of our clients and shareholders, and systems are in place to manage personal and corporate information that we store for our business operations. Going forward, we will continually enhance these systems as well as education and training for executive officers and employees, so that we rightfully earn the confidence of clients and shareholders.

Nomura Group Information Security Policy

This policy sets out basic principles for safeguarding the security of information. Each company in the group maintains its own supplemental rules based on the policy and continually improves the management of information supplied to clients according to business requirements. Executive officers and employees can review our information security regulations on our intranet.

Nomura Securities has prepared internal regulations that include rules regarding insider trading to strictly manage information related to corporate clients.

Nomura Group Information Security Committee

We established this committee to deliberate key information security issues. The Group CEO appoints an executive officer to serve as the chairperson, who chooses executive officers and employees as members. The committee reports as necessary to the Group Management Committee.

Assignment of Information Security Managers

All Nomura Holdings, Inc., Nomura Securities Co., Ltd., Nomura Asset Management Co., Ltd., and The Nomura Trust & Banking Co., Ltd. department and branch office heads serve as Information Security Managers and are responsible as personal data controllers as defined by the Financial Services Agency. These Information Security Managers are responsible for the security and proper management of information assets handled by their work area and for properly providing their staff with advice and guidance in this regard.

Personal Information Protection Law of Japan

The Nomura group handles personal information about its many customers with care, and efforts regarding personal information are very important. We handle customers' personal information with extreme care, complying with personal information protection-related laws and regulations as well as the Nomura Group Privacy Policy and the aforementioned information security-related rules.

Nomura Securities Co., Ltd. appointed an Information Security Manager and a checker for each department to thoroughly safeguard personal information by overseeing the management or handling of the following items.