Leakage of confidential and personal information and outages of information systems
First written in FY2020. 2 of 3 entries say "Mitigated", first in FY2023. Latest entry: FY2024.
The whole theme swung hardest in 2026: 33 of 103 companies on the "Worse" side.
32 other companies' latest entry also says "Mitigated".
- FY2024MitigatedAnnual report
「In addition to implementing physical security measures based on zero trust, including safeguards against unauthorized access, malware countermeasures and the adoption of encryption technology, we are reducing risk by strengthening information security through regular security audits and vulnerability assessments, the preparation and implementation of emergency response plans, and education, training and drills for officers and employees.」
Measures addressing the risks of information leaks and system outages became more specific, including zero trust, malware countermeasures, encryption, audits, vulnerability assessments and training. - FY2023MitigatedAnnual report
「Recognizing that information and information systems are important company assets and essential to gaining and maintaining the trust of customers and business partners, the Group regards information security as a key management issue related to its business activities. Under the “JGC Group Information Security Policy” and “JGC Group Information Security Guidelines,” we have established an information security management system and are pursuing continuous review, improvement and enhancement.」
In response to the risks of confidential information leaks and information system outages, an information security management system based on Group policies and guidelines, together with a framework for continuous improvement, was put in place. - FY2020First statedAnnual report
「If this information is leaked or lost due to external attacks, computer virus infections or other causes, substantial costs may be incurred to address the situation, and the loss of customer trust could affect the Group's businesses, operating results and other matters.」
The risks of information system outages caused by information leaks or loss, equipment damage, communication line problems and other factors, together with measures such as preventing unauthorized access and encryption, were documented.