Governance

The basic policy and objectives of Toshiba’s corporate governance are to realize sustainable growth and raise the enterprise value of the Group over the medium- to long-term, and to contribute to the interests of all stakeholders, including shareholders, investors, employees, customers, business partners, creditors, and local communities.
Our Corporate Governance Guidelines stipulate that outside directors comprise a majority (50% or greater) of directors so that the Board of Directors can appropriately perform monitoring and supervisory functions.

See below for details on initiatives.

Toshiba Group is engaged in businesses centered on energy, social infrastructure, electronic devices, and digital solutions, helping support people’s lives. We consider it our responsibility to leverage the knowledge and experience we have acquired through manufacturing since our founding, not just in the physical world but also in the online connected world that extends into all areas, in order to strengthen cyber security, protect society, and deliver peace of mind.
To ensure total security for information, products, control, and data, Toshiba Group has adopted the concept of “cyber resilience”, which is the ability to prepare for possible cyber-attacks and other security incidents, minimize their impact, and recover as quickly as possible. To put this concept into practice, we have defined the following three parameters: P for “prepare,” M for “mitigate,” and R for “respond & recover.” P denotes preparations for cyber security incidents; M signifies mitigation of a loss caused by an incident; and R indicates the time required to deal with and recover from an incident. To become cyber-resilient, it is necessary to promote P and M and reduce R. To realize such cyber resilience, Toshiba Group promotes comprehensive cyber security measures from the three perspectives of governance, security operations, and human resource development.

• Self-assessment of cyber security management maturity: This refers to the self-assessment aimed at visualizing the current maturity level of cyber security management to enable each company to understand the gap between targets and reality. There are five evaluation levels, with maturity levels evaluated by categories such as governance, risk management, incident response, educational program. This is currently applied to key Group companies, Toshiba Elevator and Building Systems Corporation, Toshiba Lighting & Technology Corporation, Toshiba Plant Systems & Services Corporation, Toshiba Development & Engineering Corporation

See below for details on initiatives.

We also report on other initiatives within the governance sector.
See below.

• Risk Management and Compliance
• AI Governance Statement