Yokohama, Japan - JGC Corporation announces that it has earned ISO/IEC 27001 certification: 2005 (JIS Q 27001: 2006). This is the first such certification to be granted in Japan's engineering business world.

JGC is an engineering contractor providing global engineering and construction services for plant and facilities projects. The company understands its responsibility in securing important information regarding its own know-how and technologies, as well as the engineering information provided by project clients. To this end, JGC instituted two sets of in-house rules in November 1999: its Company Regulations on Information Security and its Guidelines for Information Security.

In view of today's increasing dependence on information systems in executing projects, we determined that obtaining certification attesting to JGC's observance of international standards -- specifically, the Information Security Management Systems ISO/IEC 27001: 2005 (JIS Q 27001: 2006) -- would be valuable, since having them would be advantageous for JGC in reinforcing the trust of its clients while strengthening the company's international competitiveness as it seeks future project contracts. On September 5, 2006, JGC obtained the certification of its corporate level universal information system (covering the operation and management of various servers, user authentication management, Internet operation and management including email, communication management such as LAN/WAN, and other elements.).

It should be noted that two entities worked together to undergo the examination by the ISO. They were the Information Technology Department of the Engineering Division of JGC Corporation, and the System Management Services Division of JGC Information Systems Co., Ltd., which is a member company of the JGC group and operates JGC's universal information system.

JGC will exert continued efforts to improve the competence levels of internal auditors concerned with information security and expand its educational systems in this area. The company further intends to increase client trust in its information security by regularly carrying out PDCA (Plan, Do, Check, and Act) cycles based on ISO 27001 standards.