Information Security Basic Policy [ISO/IEC 27001]

AGENCIA, Inc. views information security as the cornerstone that underpins the reliability of corporate activities and as an indispensable foundation for business operations across all areas of IT-driven problem-solving.
We recognize that protecting all information assets—including those entrusted to us by our customers and business partners, as well as our own intellectual property and operational information—is key to maintaining and enhancing corporate value.
Therefore, while striving to maximize business outcomes such as operational efficiency and cost reduction, we place the establishment of an Information Security Management System (ISMS) at the core of our management and make its continuous and effective operation a pillar of our corporate philosophy.
Furthermore, we view our information security initiatives not merely as risk mitigation measures, but as actions grounded in corporate ethics and part of our social responsibility. We aim for all executives and employees to share this philosophy and incorporate it into their daily work.

AGENCIA, Inc. implements organizational and technical control measures to address all risks in order to maintain the confidentiality, integrity, and availability of its information assets, and flexibly revises these measures in response to changes in the environment and society.
We clearly define information security objectives, establish a cycle to periodically evaluate and verify whether these objectives are being met in actual operations, and implement corrective actions as necessary.
Furthermore, we comply with external requirements—such as laws, guidelines, industry standards, and contractual obligations—and establish a compliance framework that integrates these requirements with our internal regulations.
We will continuously provide education and training optimized for each organizational level so that every employee deeply understands the importance of information security and acts with a high sense of ethics and responsibility.
Furthermore, centered on the Information Security Committee, we will continuously evaluate and review our policies and operational systems, striving to secure public trust and maintain and improve the quality of our security.