Value HR Co.,Ltd.

The Group's core business is highly dependent on the Value Cafeteria® System (including its health checkup reservation and result management functions), and system development costs may become substantial. If usage of the system does not increase as expected, there is a risk of a significant impact on business performance. The Group has positioned efficient and effective system development as a key management issue and is working to improve profitability.

The servers of the Value Cafeteria® site store a wide variety of information, including customer data, and there is a risk of data leakage, destruction, or malfunction due to natural disasters, unauthorized access, computer viruses, and other causes. Should such an event occur, in addition to a loss of corporate trust, there is a risk of damage claims and litigation from customers, including business partners and suppliers. As countermeasures, the Group has implemented firewalls, database encryption, 24-hour server monitoring, and daily data backups.

The Group's business depends on communication networks, and if network failures or system downtime occur due to natural disasters, overload, unauthorized intrusion, or employee operational errors, it would become impossible to continue operations. In the event of such a failure, there is a possibility of a significant impact on business reliability due to litigation and damage claims. As countermeasures, the Group continuously maintains system redundancy and data center duplication and distribution, and works to minimize service outage time using backup equipment and systems.

The Group is a personal information handling business operator that handles large volumes of personal information through the Value Cafeteria® site, and is subject to the Act on the Protection of Personal Information. It is explicitly stated that mishandling of personal information protection efforts could affect the continuity of the company, and this is recognized as an extremely serious risk. As countermeasures, the Group has obtained Privacy Mark certification (acquired March 2004), established and maintains a management system based on ISO/JIS Q 27001, and implements multi-layered security measures including firewalls, encryption, and 24-hour access monitoring.

The Group has obtained a designated agency number (91399048) based on Article 16, Paragraph 3 of the Standards Concerning the Implementation of Specific Health Checkups and Specific Health Guidance, and performs agency operations such as administrative checks, coordination of billing and payments, and management of health checkup data. If the management system declared in the designated agency application cannot be maintained, the designated agency number must be withdrawn, which could impede the performance of agency operations in the Healthcare business and affect business performance. As a countermeasure, the department responsible for the Healthcare business thoroughly ensures compliance with the declared management system.

The establishment of health insurance societies is subject to authorization by the Minister of Health, Labour and Welfare, and delays in establishment due to circumstances specific to business owners or changes in the economic environment may affect the business performance of the Group. While the Group strives to focus its support on projects with high certainty, the risk of plan changes due to external factors cannot be eliminated. As a countermeasure, the Group has built a flexible response system through close information sharing with business owners.