Security
- Do you provide education or training for cybersecurity personnel?
- How is the security of terminals used for maintenance ensured as a service provider?
- Do you have an established system, regulations, and policies for information security?
- Do you store evidence needed for investigations in case of security incidents?
- When the service ends, is the information stored on the service properly discarded or returned?
- Are appropriate physical security measures in place where the system is installed?
- Where are the data centers located?
- Is the Information Security Basic Policy defined and published?
- How are notifications provided for new features, function updates, and maintenance?
- Are vulnerability management processes and patch application frequencies established?
- Is communication using secure protocols and encrypted?
- Please tell me about the service uptime rate and estimated recovery time after an outage
- Have you obtained official certifications from external organizations (such as ISMS)?
- Is the security checklist publicly available?
- Is there any material that provides an overview of security initiatives?
- How are outages and incidents notified?
- Do you perform regular service outages for maintenance?
- Does the data center meet the FISC (Financial Information System Center) security standards?
- Can you audit our office or data center for new contracts or contract renewals?
- Do you have appropriate measures in place against external attacks (unauthorized access, DDoS attacks, etc.)?
- Are regular vulnerability assessments conducted by third parties?
- Will content (text, images, videos) created in Teachme Biz be published or used without permission?