Governance

Risk Management

The Ricoh Group implements risk management in order to accurately respond to risks that may give serious adverse impact on corporate activities of Ricoh. The basic purpose, when implementing risk management, is to realize effective and efficient total risk management (TRM), by grasping exhaustively and systematically, and organizing and responding to the risks surrounding the Ricoh Group, in order to increase stability, sustainable development and corporate value of the Ricoh Group.

Total Risk Management (TRM) system

Based on the Risk Management Principles stipulated in the Ricoh Group Corporate Management Principles, the GMC/Internal Control Committee has established a risk management area of responsibility for each managerial risk and implements thorough risk management in daily execution and business operations. In addition, the Group has established a Risk Management Support Division that provides comprehensive support for executives, division responsible for managerial risk, and all divisions within the Group.

Total Risk Management (TRM) system

Managerial Risk and Sectoral Risk

In order to secure effective/ efficient Risk Management operation, risks are categorized and specified as Managerial Risks that threaten human life, or cause great impact on society, or great damage in value in the event they occur, or Sectoral Risks which are important risks other than Managerial Risks, and controlled by each business unit/ each Group company. PDCA (Plan, Do, Check and Act) cycle of risk management is then carried out depending on the importance of each risk.

Determining and reviewing managerial risk

The Group assigns a risk value based on frequency and degree of impact for external risks such as world trends, incidents and accidents, as well as for internal risks such as changes in the business structure, and creates a two-dimensional risk map to define managerial risk. This is reviewed annually at the time the business plan is being created.

Major risks

The Ricoh Group pays particular attention to the following types of risk to prevent incidents that may exert adverse impact on corporate business activities, and to minimize the damage in the event that they do occur.

  • Natural disasters
  • Serious accidents
  • Exchange rate fluctuations
  • Serious quality problems
  • Difficulty in acquiring raw materials
  • Leaks of personal information and corporate secrets
  • Bribery and corruption
  • Participation in anti-social actions
  • Insider trading
  • Violation of environmental regulations
  • Violation of export/import regulations
  • Human rights issues
  • Fraud in relation to business operations
  • , etc

Responding to incidents and accidents

To respond quickly and appropriately to an incident, we clarify areas of management responsibility and reporting levels according to the nature of the incident. At the same time, we determine the implementation sequence of emergency response procedures and reports to the president and relevant executives based on the president's policies as applied to the RGS.
In the fiscal year ending in March 2014, there were no major incidents that required disclosures to external organizations.

Page Top

BCP (Business Continuity Plan) of the Ricoh Group

The Ricoh Group has created a Business Continuity Plan (BCP) to enable the business to quickly recover and continue and to minimize the degree of damage in the event of an unanticipated disaster or accident.
In addition to the business continuity plan itself, this document introduces BCM issues such as implementation, application, education, training, correction and reviews as the coverage of BCPs.

<<BCP Conceptual diagram>>

BCP Conceptual diagram

The Ricoh Group has been formulating its BCP by referring to the 2nd edition of "Business Continuity Guidelines" published by the Cabinet Office of the Government of Japan. The Risk Management Support Division, as the secretariat, organizes functional teams within the Ricoh Group, and formulates and promotes BCP.

Main steps of formulation

  1. 1.Policy
  2. 2.Plan
    1. (1)Identification of phenomenon to be examined
    2. (2)Evaluation of impact
    3. (3)Assumption of "important operations" damage
    4. (4)Extraction of "important elements"
    5. (5)Development of BCPs
  3. 3.Implementation and application
  4. 4.Education and training
  5. 5.Inspection, correction and review by the management

Currently, the Ricoh Group has two BCPs, one being formulated on the assumption of "New Influenza epidemic" and the other being the "Widespread disaster in Japan, such as major earthquakes."

New Influenza BCP

The Ricoh Group establishes response systems and execute necessary actions against the risk of a new influenza epidemic, based on the following basic policy.

<Basic policy>

  1. 1)Ensure lives and health of Employees and their family members.
  2. 2)Prevent infection from spreading.
  3. 3)Provide services and products that are strongly requested by our customers and societies.
  4. 4)Maintain business foundation.

Alert Level

In order to facilitate Ricoh Group companies around the world to recognize the conditions of outbreak of new influenza, and to respond based on a prescribed action plan, in the event of an outbreak of new influenza the Ricoh Group has established and has been applying the original alert level and criteria of issue. Having experienced the new influenza (A/H1N1) epidemic around the world from 2009 to 2010, the Ricoh Group conducted a review of the alert level in order to enable appropriate responses according to the individual conditions, and has been adopting the current level since FY2011.
<Original "Alert Level" of the Ricoh Group>
The 5-step decision levels are formulated, and each Ricoh Group company implements countermeasures according to each level.
By referring to the phases released by the WHO, the Headquarters of Ricoh conducts a comprehensive study of: (1) the spread of infection, (2) the severity level, and (3) the damage to the Ricoh Group in each region, etc., and make a specific assessment of the alert level in each region.
The following is the overview of the alert levels.

alert levels

Action Guideline

The Ricoh Group has established and is implementing the "Ricoh Group New Influenza Action Guideline."
The Action Guideline provides operations and activities to be conducted by each department and employee, approved/prohibited actions under each alert level. It also provides necessary preparations and execution items for operations to be continued under the alert level 5.

Important business operations

Ricoh Group companies/Divisions decide the business operations with priority that should be continued even during the pandemic of alert level 5, ensuring that safety of Employees is secured.

As a rule, the Ricoh Group suspends its businesses under the pandemic of alert level 5 and its Employees shall stay at home. Nevertheless, there are business operations whose continuation is considered indispensable in order to meet the strong needs of the society or due to inevitable reasons from the management point of view.

  1. 1)Continuing businesses with the utmost priority
    Operations to continuously provide customers who are engaged in public works* with products and services in the following
    • maintenance services and supplies of MFP/Printer/FAX.
    • thermal media products (products related to medical services, food and physical distribution industries.)
      • * "Customers who are engaged in public works" refer to sectors directly engaged in social functions and infrastructure businesses and the like designated by the government (for instance, public organizations, medical services, public law enforcement and communication bodies, public transportation, food, gas, water, finance and physical distribution industries, etc.).
  2. 2)Continuing jobs with priority
    • Basic jobs that must be performed by the Ricoh Group so that it can be sustained as a corporation (Payments of salaries, Payments to its creditors, etc.).
    • Jobs whose continuation under alert level 5 is regarded to be indispensable by each division, which is registered as such by the approval of the division manager in advance, and for which Response Plan that stipulated has been prepared.

Response Plan

The Ricoh Group has prepared a Response Plan, to continue business under the alert level 5.
Each company and each department has conducted analysis of impacts on the Continuing businesses with the utmost priority and Continuing jobs with priority, and prepared response plans based on the "Ricoh Group New Influenza Action Guideline."

Large Scale Disaster BCP in Japan

In order to respond quickly and effectively to widespread natural disasters and accidental disasters in Japan, the Ricoh Group has established the Large Scale Disaster BCP in Japan based on the following basic policy.

<Basic policy>

  1. 1.Utmost priority must be placed on securing the safety of employees, their families, customers and business partners.
  2. 2.The priority must be placed on the responses to the customers who are engaged in the continuity of public works (e.g., public organizations with important roles for disaster response, medical institutions and government-designated infrastructure businesses).
  3. 3.The impact on the business must be minimized by conducting advance study of countermeasures and making sufficient preparations and responses against possible damages on the business of the Ricoh Group.
  4. 4.The viewpoint of BCP must be always be included in the review of business and operational process, instead of making a stand-alone framework of BCP a separate exercise of business activities.

Assumption

For the purpose of facilitating quick, appropriate and wide-ranging response to various disasters likely to occur in widespread regions in Japan (e.g., earthquakes, large-scale flood disasters, volcanic eruptions, nuclear power plant accidents, etc), BCP assumes representative disasters, such as "Tokyo-Epicentered Major Earthquake" and "Nankai Trough Huge Quake" as a basis of its formulation.

Steps for BCP establishment

After selecting the important functions which the Ricoh Group should address (e.g., disaster prevention, establishment of information infrastructure, sales, production & procurement, etc.) each of these functions establishes BCP according to the following steps.

<<Diagram for BCP establishment steps>>

Diagram for BCP establishment steps

Review of the assumed risk

The formulation of this BCP was started in 2007, assuming "Tokyo-Epicentered Major Earthquake" and the "Tokai earthquake." It was completed in December, 2010, and the report was submitted to the top management of the Ricoh Group. By the lessons and reflections based on the experience of the Great East Japan Earthquake in March, 2011, the assumed risk was expanded and the reviews are conducted still now.

Education and training

Promoting awareness and providing education

"Large Scale Disaster Response Manual" for employees was distributed, while at the same time, an e-learning material titled "Major disaster: Preparation in advance and responses to the outbreak - BCP of the Ricoh Group -," was prepared to educate the outline of BCP that the Ricoh Group has developed and how to respond to disasters.

Providing simulation training

In addition to the evacuation trainings conducted by each company and business site every year, various types of simulation trainings are provided for specific groups, including "the Group Disaster Task Force ", "the Group Companies Local Disaster Task Force", "each company and business site of the Ricoh Group", etc.
In the simulation trainings, Message Board (*) browsing training is also included, which was newly developed as a means of being contacted by the company.

  • * What is Message Board?
    Message Board was developed as a means of transmitting all necessary information from the company to their respective employees even when it becomes difficult due to congested communication lines after an outbreak of a disaster.
    In addition to the use of conventional safety confirmation systems and emergency contact networks, "Message Board" is applied as a way by which employees can read messages from their companies using their PCs and smartphones.

Page Top