Notice of ISMS (ISO/IEC 27001) Certification Renewal
Flagship Inc. (Headquarters: Chiyoda-ku, Tokyo; hereinafter referred to as "the Company") is pleased to announce that it has renewed (re-certified) its ISO/IEC 27001 certification, an international standard for Information Security Management Systems (ISMS). With this renewal, the Company's certification is valid until June 19, 2029.
Since first obtaining ISMS certification in June 2020, the Company has continuously strived to maintain and improve information security within the scope of its certification, which covers the development and operation of e-commerce systems. Through this certification renewal, we will continue to strengthen our system for securely safeguarding our customers' valuable information.
About the Certification Renewal
ISO/IEC 27001 certification is continuously confirmed through annual surveillance audits and renewal (re-certification) audits approximately every three years by a certification body, ensuring that the management system conforms to the standard's requirements and is effectively operated. The Company recently underwent a renewal audit by BSI Group Japan K.K., a certification body, and its certification was renewed (Last update date: May 30, 2026; Expiration date: June 19, 2029).
Compliance with the Latest Standard (2022 Revised Edition)
The Company's certification is based on the latest standard revised in 2022, "ISO/IEC 27001:2022 (Japanese National Standard: JIS Q 27001:2023)."
The 2022 revision reorganized Annex A (controls) from 114 items to 93 items, categorized into four themes: "Organizational controls," "People controls," "Physical controls," and "Technological controls." In addition, the following 11 new controls were added to reflect recent changes in the business environment and cyber risks:
- Threat intelligence
- Information security for use of cloud services
- ICT readiness for business continuity
- Physical security monitoring
- Configuration management
- Information deletion
- Data masking
- Data leakage prevention
- Monitoring activities
- Web filtering
- Secure coding
The Company completed the transition to this 2022 revised edition in 2025, and this renewal audit was also conducted based on this latest standard. We continue to be certified under an information security system that is more aligned with actual conditions, assuming the use of cloud services and secure development and operations.
Furthermore, in recent years, there has been a trend across various management system standards to emphasize consideration for climate change. In light of these developments, the Company is promoting paperless operations to reduce the environmental impact of its business activities as a voluntary initiative separate from the certification framework.
Future Plans
The Company will continue to strive for the maintenance and improvement of an environment where customers and stakeholders can use our services with peace of mind, through the continuous operation and improvement of ISMS.
Certification Overview
| Standard | ISO/IEC 27001:2022 / JIS Q 27001:2023 |
|---|---|
| Certification Registration Number | IS 725908 |
| Scope of Certification | Development and operation of EC systems |
| Certification Body | BSI Group Japan K.K. |
| Initial Certification Date | June 20, 2020 |
| Last Update Date | May 30, 2026 |
| Expiration Date | June 19, 2029 |
*The registration details of this certification can be verified by searching for "フラッグシップ株式会社" in the ISMS Certified Organizations Search provided by ISMS-AC (Information Management System Accreditation Center).
Company Overview
| Company Name | Flagship Inc. |
|---|---|
| Location | WeWork Nittele Yotsuya Building, 5-3-23 Kojimachi, Chiyoda-ku, Tokyo 102-0083 |
| Business Activities | Development and operation of EC systems |
| Website | https://flagship.inc |
Inquiries regarding this matter
Flagship Inc. Department in charge: CorporateIT