Risk Management Framework Centered on the CSR Committee
First written in FY2016. 3 of 6 entries say "Advanced", first in FY2020. Latest entry: FY2025.
83 other companies' latest entry also says "Advanced".
- FY2025AdvancedAnnual report
「We have established Risk Management Regulations covering the basic matters of risk management. The Risk Management Committee, chaired by the representative director, develops plans for compliance, risk management, internal controls over financial reporting, information security, human rights, occupational health and safety, organisational structures and related rules. Based on the committee’s instructions, the Risk Management Subcommittee, established under the committee, coordinates with the relevant departments, monitors risks on a daily basis and considers how to respond to newly anticipated risks.」
The company explicitly described a structure centred on the Risk Management Committee, chaired by the representative director, and its subordinate subcommittee, rather than the previous structure centred on the relevant departments. It also specified the management areas covered, including human rights and occupational health and safety. - FY2024AdvancedAnnual report
「We have established Risk Management Regulations covering the basic matters of risk management for our company. Led by the director responsible for the administrative functions, we coordinate with the relevant departments, monitor risks on a daily basis and consider how to respond to newly anticipated risks. Regarding information security, we are strengthening our information management structure, including by enhancing IT and operational security measures under the leadership of the Information Security Office, the relevant department.」
In addition to cooperation among the relevant departments under the Risk Management Regulations, the company described a structure for managing, assessing and monitoring sustainability-related risks within the same framework and reporting material risks to the board of directors. - FY2020AdvancedAnnual report
「Regarding information security, we are strengthening our information management structure, including by enhancing IT and operational security measures under the leadership of the Information Security Office, the relevant department. In response to risks related to the handling of personal information, the Personal Information Protection Office provides web-based education, including e-learning, and conducts internal audits based on PrivacyMark certification, and works to maintain the management structure by communicating the results throughout the company. In addition, with the Legal Department serving as the contact point, we have established a system under which we can obtain advice from external legal counsel from a professional perspective as necessary. We also conduct disaster preparedness training for all employees every year in preparation for natural disasters such as earthquakes.」
The company described a management structure including the Information Security Office, Personal Information Protection Office, Legal Department and external legal counsel, as well as annual disaster preparedness training for all employees. - FY2019From a description centred on the CSR Committee to a structure centred on the director responsible for the administrative functions and the relevant departmentsAnnual report
「We have established Risk Management Regulations covering the basic matters of risk management for our group. Led by the director responsible for the administrative functions, we coordinate with the relevant departments, monitor risks on a daily basis and consider how to respond to newly anticipated risks. Regarding information security, we are strengthening our information management structure, including by enhancing IT and operational security measures under the leadership of the Information Security Office, the relevant department.」
The description changed from one centred on the CSR Committee to a risk management structure centred on the director responsible for the administrative functions, the relevant departments and the Information Security Office. - FY2017RestatedAnnual report
「The CSR Committee will establish risk management regulations based on the risks anticipated by the company. It will then ensure that these are thoroughly communicated throughout the company and enhance their effectiveness. The CSR Committee will work with the Internal Audit Office to monitor risks on a daily basis and consider how to respond to newly anticipated risks.」
The company continues to describe a structure in which risk management regulations are established under the CSR Committee, with the Internal Audit Office cooperating in daily monitoring and responses to new risks. - FY2016First statedAnnual report
「The CSR Committee will establish risk management regulations based on the risks anticipated by the company. It will then ensure that these are thoroughly communicated throughout the company and enhance their effectiveness. The CSR Committee will work with the Internal Audit Office to monitor risks on a daily basis and consider how to respond to newly anticipated risks.」
The company describes a structure in which risk management regulations are established under the leadership of the CSR Committee, with the Internal Audit Office cooperating in daily monitoring and responses to new risks.