When the group wanted to replace the AS/400 attendance system with its package, I remembered an external privacy auditor whose reaction to the platform had been exactly the opposite.
By July 2022, the parent company’s position was clear: the subsidiary should use the same attendance package and move away from the system developed on AS/400.
That direction felt strange because I had seen the platform become a source of reassurance in an external audit of our personal-information protection management system under JIS Q 15001.
One auditor asked sharp questions and clearly understood systems. When the inspection reached the server environment, I prepared myself to explain our security controls in detail.
He asked which server we used. I answered, “AS/400.” He immediately replied, “Then that is fine. OK,” and began walking toward the next area.
It took me several seconds to understand. He already knew the platform’s reliability and security characteristics. In that moment I felt, with complete sincerity, that I was glad we had chosen AS/400.
That memory made it even harder to accept that standardization alone was now being used as a reason to discard the system.
CHAPTER 03 · PART 04 · EPISODE 5 / 6 STORIES · 35 STORIES TOTAL