Mitutoyo PSIRT

Product Security Policy

February 2, 2026

Mitutoyo Corporation contributes to the trust and development of society through high-precision measuring instruments, guided by our corporate philosophy of "Good Environment," "Good People," and "Good Technology."       
In accordance with our Ethical Conduct Guidelines, we are committed to providing safe and reliable products to all stakeholders by sincerely addressing cybersecurity as an integral part of product quality.

1. Product Security Response System

We have established and operated Mitutoyo PSIRT (Product Security Incident Response Team) as a global system specializing in handling security incidents and vulnerabilities related to our products.

2. Compliance with Laws and Regulations

We comply with domestic and international laws, regulations, and industry standards related to cybersecurity. We continuously review and revise our policies and operational systems as necessary to maintain and improve security quality. Additionally, we require our suppliers and development partners to adhere to appropriate security standards.

3. Development of Secure Products

We appropriately manage product security risks throughout the entire product lifecycle (planning, design, manufacturing, maintenance, and disposal). We practice secure development based on the principles of Secure by Design and implement measures to protect our products from threats such as cyberattacks, unauthorized access, and information leaks.

4. Response to Product Vulnerabilities

We have established a response framework in compliance with ISO/IEC 29147 (Vulnerability Disclosure) and ISO/IEC 30111 (Vulnerability Handling) to address discovered vulnerabilities. Vulnerabilities in our products, as well as vulnerabilities in software used in our products, will be actively disclosed in coordination with external organizations based on our Vulnerability Disclosure Policy.

5. Response to Cyberattacks

In the event of a cyberattack that affects the provision of our products, we will collaborate with our CSIRT (Mitutoyo CSIRT) to promptly minimize damage and restore services.

6. Continuous Improvement

We continuously improve our response framework and processes related to product security, striving to enhance the maturity of PSIRT. We also conduct continuous education and training to improve the security literacy of all employees involved in product development and quality assurance.