Information Security

The risk of cyberattacks has risen in recent years. In response, DMG MORI has set information security as a crucial management issue. We have continued to enter into consultation agreements with external security experts since 2015, have formulated an information security policy, and have established an Information Security Committee, in an attempt to strengthen information security management throughout the company.
We are now responding to increasing threats while establishing Information Security Committees within each group company and sharing information throughout the group. Many companies reported being affected by cyberattacks in 2020. DMG MORI places a priority on safeguarding the important information we receive from our customers. Toward that end, we revise how we manage information as needed and continue to strengthen our security measures.
We are building a security management organization with the Control Security Committee playing a central role, in order to manage internal company information as well as the security of customer networks and customer-facing services accessed using DMG MORI machine tool products. We also leverage our cooperative relationships with partners in promoting efforts to enhance security in plants, which are increasingly switching to digital technologies.

Understanding that appropriate protection and management of information assets on a global consolidated basis is important for continuous and stable business activities, DMG MORI CO., LTD. (hereinafter referred to as the “Company”) will stipulate its own Basic Policy for Information Security.
The Company will strive to adhere strictly to the Basic Policy for Information Security, in order to guarantee the security of our products and to protect the customers’ information when offering manufacturing solutions with machine tools at the core. Furthermore, the Company will continue to provide ever increasing value, innovation and unlimited possibilities of machine tools to customers worldwide while following international laws and regulations.

• 1. In order to protect all of its information assets from unauthorized access, loss, destruction, manipulation, and leaks, etc., the Company will appoint a person with overall responsibility for information security management. Further, the Company will organize the Information Security Committee to establish an appropriate management structure.
• 2. The Company will continuously implement educational programs necessary to raise the awareness of the importance of information security for all the employees and persons involved in its business.
• 3. DMG MORI group will strictly follow laws and regulations, code of ethics, and internal rules. By carefully observing the social environment and the technological advancement, the Company will continuously review its internal rules, structures, and systems. In this way, the Company will strive to evaluate, maintain, and improve its information security management system.
• 4. Any violation of the Basic Policy of Information Security and its related rules will be strictly dealt with severely.

December 1, 2015
Revised:January 7, 2022
DMG MORI CO., LTD.
President Dr. Masahiko Mori

The DMG MORI Group holds regular meetings of the Information Security Committee, with the Director of Management serving as the Information Security Supervisory Manager. We continue to expand the organization in the company headquarters and in group companies.
The committee is involved in activities related to human, organizational, and technical measures, including formulating security strategies, strengthening governance in areas such as information security training, implementing security measures, and conducting information security audits. We also regularly hold global security conferences with overseas group companies.

DMG MORI has established a basic policy on personal information protection, under which we strive to use the personal information we obtain through conducting machine tool-related business only within our defined scope, and manage this information appropriately within the stipulated retention period.

→Privacy Policy