Cyberattack and Information Leakage Risk
First written in FY2020. 1 of 4 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
5 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「In addition, we are continuing to collect information and make improvements from multiple perspectives, including strengthening cooperation with external specialist organizations and addressing cloud and AI environments. We are also promoting efforts to formulate a system security policy based on the occurrence and recovery of cyber damage and to improve the effectiveness of emergency response.」
The company has expanded the scope of its cyber-risk response beyond SOC, SIEM, and CSIRT to include cooperation with external specialist organizations, responses to cloud and AI environments, and the formulation of a security policy based on the occurrence and recovery of damage. - FY2023Development of specific security monitoring and CSIRT structuresAnnual report
「We are strengthening security monitoring by establishing a SOC (Security Operation Center) and introducing SIEM (Security Information and Event Management) tools, while also working to build a CSIRT (Computer Security Incident Response Team) structure capable of responding rapidly and smoothly when an incident occurs.」
As measures to address the risks of cyberattacks and information leakage, the company specifically describes monitoring and response structures involving SOC, SIEM, and CSIRT. - FY2021-Q3RestatedAnnual report
「During the cumulative third quarter of the current consolidated fiscal year, there were no material changes in the occurrence of major risks that management recognizes could materially affect the financial position, operating performance or cash flows of the consolidated companies, among the matters concerning the business and accounting conditions described in the quarterly report, or in the business and other risks described in the annual securities report for the previous fiscal year.」
The company states that there has been no occurrence or material change regarding the risks of cyberattacks and information leakage. - FY2020First statedAnnual report
「It is difficult to completely eliminate the possibility that information may be leaked or misused externally as a result of unauthorized access or other incidents. If such an incident occurs, we could become involved in legal disputes or be subject to sanctions by regulators in Japan or overseas.」
The company newly identifies risks involving unauthorized access to, leakage, and misuse of personal information and confidential information of business partners, as well as legal disputes and administrative sanctions. It also describes measures against cyberattacks, IT governance, employee training, and enforcement of information management rules.