Leakage of Personal and Critical Information

「In addition to so-called ingress and egress controls, such as firewalls, the company implements information protection measures covering all access points, including endpoint monitoring, and has established the CSIRT and SOC as specialized security organizations to respond to security incidents. It also shares security topics, including vulnerability information, with Group companies, assesses their actual security levels, promotes the implementation of security measures and provides guidance on resolving issues.」

「To address this risk, the company has established a CSIRT (Note 1) and SOC (Note 2) to monitor, analyze and respond to cybersecurity threats. It has also established IT control policies, including its Personal Information Protection Policy and Information Security Management Policy, implemented so-called ingress and egress controls and other information protection measures, and provided education and training, including targeted attack email exercises for officers and employees, to ensure widespread awareness of the importance of information management.」

「Despite these measures, if important information were to be leaked externally, the Group's performance and other results could be adversely affected by damage to its social credibility and other factors, as well as substantial costs incurred in responding to the incident and a decline in brand value.」