Toyoda Gosei Co., Ltd. Toyoda Gosei Co., Ltd.

Features &
Topics
  1. HOME
  2. Sustainability
  3. Governance
  4. Risk Management

Risk Management

Basic Philosophy

Risk control is becoming increasingly important as the management environment for businesses undergoes rapid changes with rising complexity and uncertainty.

Toyoda Gosei considers risk management to be an important activity in moving toward sustainable growth. This is broadly divided into business strategy management, which leads to business growth by grasping opportunities while minimizing negative aspects and maximizing positive aspects, and management foundation risk to prevent crises that have major impacts on management and, in the event that they do occur, to minimize damage and loss. In this risk management, the CRO leads the group overall, undertaking activities to reduce each risk while also identifying risks in company-wide meetings of each function and making decisions on measures to counter these risks.

The Internal Control Committee, for which the company president serves as chairman, identified major risks, decides countermeasures, and checks the execution status for both business strategy risks and management foundation risks. More effective countermeasures are then implemented. In addition, the Board of Directors debate the actions to take against serious risks and unexpected business risks from political instability, and conduct continuous kaizen.

The basic stance on management foundation risks is set forth in the Crisis Management Guidelines, which clarifies the handling items for appropriate and prompt action in the event that problems occur.

■Company-wide Risk Management System
Risks the Company Faces

Amid significant changes in the external environment—from shifts in international affairs and rising geopolitical risks to the increasing prevalence of cyberattacks—as well as growing expectations of respect for human rights and environmental regulations, the business landscape is undergoing substantial transformation. Within the automotive industry specifically, a surge in protectionism is manifesting itself via the imposition of tariffs, while the pace of the spread of electric vehicles has become more subdued. In such a challenging business environment, characterized by a broad range of risks and unpredictable changes, achieving sustainable corporate value enhancement requires proactive adaptation to changes and the implementation of risk management on a global scale.

Furthermore, in recent years, the automotive industry has faced a series of certification fraud incidents, undermining trust in product quality. In addition, compliance issues arising from improper transactions within supply chains have also emerged. The importance of risk management is greater than ever as we strive to remain a trusted “company of choice” in the eyes of stakeholders and society.

Status of Activities

For FY2025, we have selected four key Business Strategy Risks. Among these are the risk of failing to properly work toward achieving carbon neutrality and the circular economy, and the risk of being unable to build a value chain that keeps pace with trends in the growing adoption of BEVs, including the establishment of supply chains and production systems capable of adapting to fluctuations in BEV demand. Based on this situation, we have incorporated these risks into specific business activities, such as strategic investments and product development, to drive progress.

For Management Foundation Risks, we have selected risk factors that include, the need to respond to US-China trade tensions and US-government policies, with tariffs of particular concern, as well as potential supply chain disruptions arising from inadequate responses to national regulations such as export restrictions on critical minerals. We selected a total of eight key risks, including these additions, and are working on specific measures to mitigate these risks. The selected key risks are shared with both domestic and international Group companies. Each company conducts risk assessments and independent inspection activities in collaboration with head office, implementing a group-wide PDCA cycle. In terms of economic security, the working group established in FY2023 continues to implement measures addressing legal trends in various countries. Also, in response to the changing environment and evolving requirements, we are enhancing the supply chain to ensure stable procurement of raw materials and components.

Furthermore, discussions on key risks, including those related to economic security and sudden risks arising from political instability, are held at Board meetings. Through these discussions, we continuously implement improvements that align with changing circumstances.

■Internal Controls Committee Organizational Diagram
Response to Key Risks

Business strategy risks and operating foundation risks based on the business environment are assessed from the perspective of impact on operations (financial impact, etc.) and possibility of occurrence (frequency), and key risks are identified.

Key risks are reflected in company policy as important action items, and initiatives are made to mitigate or prevent risks.

■Examples of Key Risks
Classification Main key risks ★:New in FY2025
Size of risk

Impact on operations (financial impact, etc.)
×
Possibility of occurrence (frequency)
Large
  • Addressing carbon neutrality and the circular economy (including matters pertaining to carbon pricing and rubber/plastic materials)
  • Large-scale disasters (e.g., abnormal weather)
  • Injuries and operation shutdowns due to serious work accidents
  • US-China trade frictions (and other geopolitical risks)
  • Recalls due to serious quality issues
  • Tariffs and other US-government policies
  • Cyberattacks and scam emails
  • Supply chain disruptions arising from inadequate responses to national regulations
Medium
  • Responding to BEV transition (including the launch of new products for the BEV market and addressing declining demand for fuel-related components)
  • Fires or explosions leading to an interruption of business operations
Crisis Management Project in Anticipation of Large-Scale Earthquake Disasters

A crisis management system has been put in place in the event of a massive disaster, such as the predicted Nankai Trough earthquake or natural disasters due to climate change. This system is based on the principles of human life first, community support, and early recovery. Specifically, in addition to infrastructure and system measures based on the Crisis Management Project, resilience training has been conducted more than 240 times for directors and members of disaster response departments since FY2013. These efforts are based on the Company’s belief that improving the skills of response personnel is essential. Specific procedures for the recovery of affected buildings, facilities, and processes have also been established, and for alternative production in a production recovery system.

Recovery training for design drawings and other data is also carried out so that product development can be continued even after disasters. In addition, workshops to enhance crisis management not only in Toyoda Gosei companies but also at Group companies and suppliers are conducted regularly. Assessments using earthquake preparedness measure checklists, clarification of weak points with graphs, presentation of responses taken at Toyoda Gosei and other companies, and collaborative preparation of business continuation plans (BCP) are carried out.

■Disaster Response
■Initiatives to Date
Classification Measures
Facility and equipment measures
  • Earthquake resistance measures for buildings and facilities
  • Establishment of a disaster preparedness center to serve as an operations base for the entire company in the event of a disaster
  • Equipping all locations with a multi-channel access (MCA) radio system*1 and satellite phones
  • Deployment of Starlink to the First Response and Production Restoration Task Forces
  • Installation of crisis management servers (earthquake- resistant structure) and emergency power generators
  • Operation of a DR*2 system and DCs*3
System measures
  • Implementation of site and building safety assessments
  • Training in operation of earthquake early warning systems and employee safety information systems
  • Preparation of supply chain information
  • Preparation of a business continuity plan (BCP)
Skills
  • Ongoing resilience training (disaster simulation exercises)
  • *1 Radio system used in Japan for various purposes, from daily operations to emergencies and disasters
  • *2 Disaster Recovery: System for restoring and repairing damaged systems
  • *3 Data Center: General term for special facilities equipped with operating computers, data communications, and other equipment
Enhancing Our Global Risk Response

In response to global risks that occur not only in Japan but also in other countries (e.g., parts and raw material shortages and the international situation), we are taking necessary actions on a global basis to quickly assess the situation (weekly BCP reports) both in Japan and overseas. Standardization is also underway so that domestic and international locations can take measures on their own initiative, and we are enhancing our ability to respond to key risks seen in the business environment of each company.

Cybersecurity Measures and Activities

As cyberattacks and cybercrimes increase across the world, the Toyoda Gosei Group has established a “Basic Cybersecurity Policy” and is strengthening information protection and cybersecurity measures.

Security guidelines are used for domestic and international Group companies and major suppliers. Together with inspections of the status of cybersecurity efforts, our entire global team is striving to improve activities, including establishing or upgrading internal systems and strengthening technical measures.

We are also conducting educational activities and targeted attack email training to raise employees’ awareness of security, and to improve their ability to respond to security risks in their daily work.

Basic cybersecurity policy

■Main Cybersecurity Measures
Classification Measures (domestic and international Group companies and suppliers respond in accordance with the size of the impact)
Prevent leakage due to negligence Facility and equipment measures
  • Data encryption on personal computers
  • USB device connection controls
System measures
  • Security measures when sending emails out of the company (mandatory cc to superior’s email address, encryption of attached files)
Prevent leakage due to malice Facility and equipment measures
  • Installation of computer anti-virus software
  • Constant monitoring of unauthorized communications
  • Prevention of unauthorized connections to the network
  • Firewalls to control communication with outside parties
  • Detecting and preventing tampering with systems open to the public outside the company
System measures
  • Confidentiality pledge
  • Stricter standards for allowing items to be taken from premises
  • Restricted access to file servers
Educational activities (morale measures)
  • Security training for employees
  • Company-wide confidentiality controls inspections and on-site audits using check sheets
  • Training in responding to targeted email attacks
PAGE
TOP