Establishment of Information Management Systems Based on ISO 27001 and Other Standards
First written in FY2016. 1 of 3 entries say "Advanced", first in FY2021. Latest entry: FY2023.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
0 other companies' latest entry also says "Mitigated".
- FY2023Further strengthening of information security measures and continuation of audits explicitly statedAnnual report
「To achieve our growth strategy, our Group is paying close attention to information security by establishing various rules based on ISO27001 and setting a personal-information protection policy in response to the growing importance of information management.」
In addition to ISO27001-based rules and a personal-information protection policy, the disclosure describes a backup framework, strengthened measures to prevent unauthorised access and security audits. - FY2021Information security measures specified in greater detail through operational reviewsAnnual report
「We are paying close attention to information security by establishing various rules based on ISO27001 and setting a personal-information protection policy.」
The company has specified measures including ISO27001-based rules, a personal-information protection policy, backups, firewalls and security audits. - FY2016First statedAnnual report
「We have obtained ISO27001 certification and are implementing measures including establishing various rules and regulations covering the Group, training directors, employees and part-time employees, systematising the management framework, and strengthening system development and operation.」
The company addresses information-leakage risk through ISO27001, internal rules, training, the management framework, and strengthened system development and operation.