| |
 |
  Internal IT Security Investments and Measures

|
 
The Ricoh Group has undertaken a series
of business innovation initiatives in information technology and
solutions (IT/S activities) since 1994.
Business locations in and outside of Japan have been connected
by an information network for performing most business operations
using electronic workflows and shared databases. Additionally,
the comprehensive control of the infrastructure has been extended
to cover office devices. This has resulted in improved security
and reductions in the total cost of ownership (TCO).
Key features of efforts to strengthen the security of the IT structure
are described below.

Better Performance
and Availability of the Network |
 |
 |
 |
The information network of the Ricoh Group known as R-WAN* has
been enhanced through the appropriate use of cutting-edge communication
technology to yield better cost performance and improved security.
For the intranet in Japan, a shift to a new, lowcost broadband
communication service began in fiscal 2006. In a parallel move,
preparations are being made for any network failure affecting
a large area. Scheduled plans include work to increase the total
circuit speed by 140% for the entire network of 750 business locations
and to build redundant paths to major business locations. These
efforts are also expected to yield a 10% cost reduction. The shift
to the new service was completed for about 20% of the network
in 2006, with about 90% to be completed by the end of fiscal 2007.
Other actions in this sphere include more effective solutions
to accommodate the growing use of e-mail and the Internet, as
well as better spam and virus-infected e-mail countermeasures.
Preparation for these, along with features such as full-text storage
of transmitted e-mail and stronger control of Web access logs
were under way in fiscal 2006 and they are expected to become
available in fiscal 2007. Redundant paths to key business sites
outside Japan were completed in fiscal 2005. In fiscal 2006, redundant
paths were created for the network to China, where business is
growing at a remarkable speed.
* |
R-WAN: Ricoh Wide Area Network. Work for this global network
for the Ricoh Group was initiated in 1987. Ricoh and its
Japanese and overseas affiliates (those engaged in sales,
general tasks and production) are part of this network.
Ricoh's Information Technology and Solution Division
manages R-WAN in line with security regulations. |

Measures against network
failure *The configuration
allows the emergency use of the network of Carrier B in
the event that the primary circuit (Carrier A network)
experiences a disruption. It secures an alternate route,
depending on the level of disruption.
 |
Common security levels were set up for the servers, where important
information assets are stored, and server management using registry
logs, including inventory information, was introduced in fiscal
2006. Prior to this, security policies affecting servers, which
were classified as assets to be managed on a voluntary basis,
were decided individually. By unifying these security policies
into a set of common policies, configuration status can be checked
as needed by running an inspection program. During fiscal 2007,
further enhancements will be made by expanding the scope of application
of the new system to all servers of the Ricoh Group and to more
operating systems. 
| Mechanism in place and examples
of access rights settings |
 |
Comprehensive
Management of Office Devices |
 |
 |
 |
At Ricoh's Headquarters building, which officially opened in
January 2006 in Ginza, Tokyo, Ricoh simultaneously strengthened
security and reduced TCO and the environmental burden using a
comprehensive management approach. This approach will gradually
be shared with Group companies for their use, and offered to customers.
Comprehensive
management using employee ID cards
- Entry/exit control
- Control of PC logins
- Authentication for office devices
Unification of servers
Centralized management of and universal approach to office
devices
- Availability of all MFPs in the building for shared use and integration
of functions (copiers, printers, fax, and scanners)
- Output can be generated from any MFP on any floor
- Management of printer logs
- Prevention of paper left behind through the use of IC card authentication
- Paperless facsimile transmissions and receipts

| Personal authentication
using employee ID cards with IC chips |
 |
Client PCs are subject to comprehensive
management including inventory management, based on the Ricoh
Group's rental scheme known as R-III. The mechanism allows
the downloading of the latest anti-virus files provided by security
solution providers and automatic renewal of security patches for
operating systems. Additionally, the fiscal 2006 shift to LotusNotes/Domino7®,
the communication and collaboration tool used by the entire Group,
offers enhanced convenience, thanks to the Same Time feature,
as well as stronger security functions including the feature that
prevents copying to local PCs.

|
 |

|
|