Strengthening Internal Controls, Compliance, Information Security and Risk Management
First written in FY2016. 14 of 18 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2024: 4 of 27 companies on the "Worse" side.
17 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「In addition to information security measures within our Group, we will work to promote measures aimed at reducing cyber risks across the entire supply chain.」
In addition to the existing information security training, drills and incident response, reducing cyber risks across the entire supply chain was explicitly identified as an area of focus. - FY2025RestatedAnnual report
「The Compliance Committee monitors the compliance and information security frameworks, including education and awareness programs, while the Risk Management Committee identifies highly material matters as part of its risk management activities and works to eliminate and mitigate enterprise-wide and other risks.」
The Compliance Committee and Risk Management Committee, both under the direct authority of the CEO, continue to conduct monitoring and training and to eliminate and mitigate enterprise-wide risks. - FY2024AdvancedAnnual report
「As part of our efforts to prevent misconduct, we have established rules governing gifts and entertainment, a mechanism for reviewing their contents, and standards for handling transactions involving risk. By confirming their appropriateness under these standards, we have established a framework to prevent improper transactions such as circular transactions. We also continue to provide internal training using examples of violations and have established an internal reporting system for conduct contrary to our ethical policies.」
In addition to the existing compliance, information security and enterprise-wide risk management measures, specific rules, transaction reviews, training and internal reporting mechanisms covering bribery, corruption and circular transactions were described. - FY2024-Q1RestatedAnnual report
「During the cumulative first quarter period, there were no occurrences of major risks that management recognizes as potentially having a material impact on the consolidated companies' financial condition, operating results, or cash flows, among matters related to the business and financial conditions described in the quarterly report, nor were there any material changes to the business and other risks described in the annual securities report for the preceding fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2023AdvancedAnnual report
「We continue to provide information security training covering malware incidents, phishing emails and other alerts, as well as procedures for responding to incidents, and conduct training based on assumed cyber incidents, thereby working to raise and reinforce awareness among all directors, officers and employees.」
Specific measures covering unauthorized access to information assets, misdirected emails, restrictions on the use of storage media, inventories of confidential and personal information, training and incident drills were described. - FY2023-Q2RestatedAnnual report
「During the cumulative second quarter period, there were no occurrences of major risks that management recognizes as potentially having a material impact on the consolidated companies' financial condition, operating results, or cash flows, among matters related to the business and financial conditions described in the quarterly report, nor were there any material changes to the business and other risks described in the annual securities report for the preceding fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2023-Q1RestatedAnnual report
「During the cumulative first quarter period, there were no occurrences of major risks that management recognizes as potentially having a material impact on the consolidated companies' financial condition, operating results, or cash flows, among matters related to the business and financial conditions described in the quarterly report, nor were there any material changes to the business and other risks described in the annual securities report for the preceding fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2022-Q1RestatedAnnual report
「During the cumulative first quarter period, there were no occurrences of major risks that management recognizes as potentially having a material impact on the consolidated companies' financial condition, operating results, or cash flows, among matters related to the business and financial conditions described in the quarterly report, nor were there any material changes to the business and other risks described in the annual securities report for the preceding fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2021RestatedAnnual report
「The Compliance Committee monitors the compliance and information security frameworks, including education and awareness programs, while the Risk Management Committee identifies highly material matters as part of its risk management activities and works to eliminate and mitigate enterprise-wide and other risks.」
The framework for monitoring, eliminating and mitigating information security and enterprise-wide risks by the Compliance Committee and Risk Management Committee is being maintained. - FY2021-Q3RestatedAnnual report
「During the cumulative third quarter period, there were no occurrences of major risks that management recognizes as potentially having a material impact on the consolidated companies' financial condition, operating results, or cash flows, among matters related to the business and financial conditions described in the quarterly report, nor were there any material changes to the business and other risks described in the annual securities report for the preceding fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2020-Q3RestatedAnnual report
「There were no material changes during the third quarter of the current consolidated cumulative period in abnormal fluctuations in the financial position, results of operations or cash flows, or in the matters concerning risks of the business described in the annual securities report for the previous fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2019RestatedAnnual report
「In this regard, the Compliance Committee works to monitor the compliance and information security frameworks, including education and awareness activities, while the Risk Management Committee identifies highly material matters as part of its risk management activities and works to eliminate or mitigate company-wide and other risks.」
The framework for monitoring, eliminating and mitigating information security and enterprise-wide risks by the Compliance Committee and Risk Management Committee is being reconfirmed. - FY2019-Q1RestatedAnnual report
「There were no material changes during the first quarter of the current consolidated cumulative period in abnormal fluctuations in the financial position, results of operations or cash flows, or in the matters concerning risks of the business described in the annual securities report for the previous fiscal year.」
There have been no material changes to internal controls, compliance, information security or risk management. - FY2018RestatedAnnual report
「In this regard, the Compliance Committee works to monitor the compliance and information security frameworks, including education and awareness activities, while the Risk Management Committee identifies highly material matters as part of its risk management activities and works to eliminate or mitigate company-wide and other risks.」
Reconfirming the framework for eliminating and mitigating company-wide risks through the Compliance Committee, information security framework and Risk Management Committee. - FY2018-Q3RestatedAnnual report
「There were no material changes during the third quarter of the current consolidated cumulative period in abnormal fluctuations in the financial position, results of operations or cash flows, or in the matters concerning risks of the business described in the annual securities report for the previous fiscal year.」
The frameworks for internal controls, compliance, information security and risk management were treated as having undergone no material changes. - FY2018-Q2RestatedAnnual report
「There were no material changes during the second quarter of the current consolidated cumulative period in abnormal fluctuations in the financial position, results of operations or cash flows, or in the matters concerning risks of the business described in the annual securities report for the previous fiscal year.」
There were no material changes to the frameworks for internal controls, compliance, information security and risk management. - FY2017RestatedAnnual report
「The President shall promote the development of the internal control system, taking into consideration recommendations from the director responsible for internal controls and the Compliance Committee and Risk Management Committee established under the Board of Directors.」
Reconfirming the framework for internal controls, information security and company-wide risk management through the Compliance Committee, Risk Management Committee and director responsible for internal controls. - FY2016First statedAnnual report
「The President shall promote the development of the internal control system, taking into consideration recommendations from the director responsible for internal controls and the Compliance Committee and Risk Management Committee established under the Board of Directors.」
The Compliance Committee is responsible for the compliance and information security frameworks, while the Risk Management Committee is responsible for identifying, analysing, assessing and monitoring company-wide risks.