Risk Management

The Risk Management Committee categorizes the various risks identified in relation to the Yamaha Group’s business into four categories: External Environment Risks, Strategy Risks, Operational Risk (Business activities), and Operational Risk (Support activities). The materiality of risks is assessed based on the projected scale of damages and frequency of materialization. In addition, the level of control is evaluated for each risk category, material risks requiring priority response are identified, and the divisions responsible for managing these risks are designated in order to promote risk mitigation activities and thereby improve overall risk control levels. The table below provides additional information on risk categories.

In June 2019, the Yamaha Group declared its endorsement of the recommendations of the Task Force on Climate-related Financial Disclosures (TCFD) and commenced initiatives for analyzing the impact of climate change on its finances and disclosing related information. For information regarding disclosure based on the recommendations of the TCFD, please refer to the following link.

In preparation for large-scale natural disasters, fires, infectious disease pandemics, and other emergency situations, the Yamaha Group has formulated business continuity plans (BCPs) and implements other business continuity management efforts. The Working Group for BCP and Disaster Prevention Management, which is chaired by a managing executive officer and positioned under the Risk Management Committee chaired by the president, has been established as an organization for formulating business continuity policies for responding to natural disasters and other emergency situations. In addition, Group policies and rules for responding to natural disasters and other emergency situations have been developed. In the event of an emergency, an emergency response headquarters will be set up to examine potential measures for ensuring Groupwide business continuity.

In addition, the Group BCP Policies & Rules establish basic policies, duties, and rules to minimize the effect on business when a risk event occurs, such as a natural disaster, through the rapid implementation of appropriate countermeasures.

The Yamaha Group is globally promoting internal control activities centered around financial management, such as the Groupwide standardization of operational processes. The Working Group for Financial Management is responsible for confirming that operations across the entire Group follow the Group Internal Control Policies & Rules and other regulations.

The Working Group for Compliance, an organization positioned under the Risk Management Committee, which is an advisory body to the president, is a central organization in the promotion of compliance. Chaired by a managing executive officer, this working group both promotes compliance in the Group and monitors the business execution of divisions and Group companies to ensure legal compliance and ethical operations. It also executes measures to maintain healthy business activities through employee education, awareness-raising, questionnaires, and the establishment of whistleblowing and consultation helplines.

The Yamaha Group has established provisions for trade security control in its Compliance Code of Conduct as compliance measures pertaining to international trading.
The Working Group for Export Control has been established and export control regulations and import and export procedure regulations have been formulated as part of efforts to develop a process for managing exports.

The leakage of personal information and other important information held by a company has the potential to not only damage third parties but also become a case of gross negligence that can harm the company’s reputation.

The Yamaha Group perceives information security as a critical aspect of risk management. The Working Group for Information Security, an organization chaired by an operating officer that is positioned under the Risk Management Committee, which is an advisory body to the president, has put together a policy on information management and is working to enhance the quality of this management by keeping track of the current management system while identifying vulnerabilities and guiding efforts to address them. The Yamaha Group conducts training based on the Group IT Policies & Rules, which define basic IT management policies, and the Group Personal Information Protection Policies & Rules, which contain provisions related to the protection of personal information, to ensure employees understand the importance of preventing inadvertent data leaks while taking precautions to protect against hacking by third parties.

In order to prevent occupational accidents and environmental pollution, the Yamaha Group performs risk assessments at factories and other business sites. In addition, regular monitoring, audits, emergency response training, and other activities are carried out under the guidance of dedicated occupational health and safety and environmental preservation staff members.