Cyberattacks and critical system failures
First written in FY2022. 2 of 3 entries say "Mitigated", first in FY2023. Latest entry: FY2026.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
48 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The company will prevent unauthorized external intrusions through multilayered security measures and establish a framework for early recovery when an incident occurs, in preparation for any eventuality.」
As measures to address the risk of cyberattacks and critical system failures, the company has specified layered defenses and an early recovery framework. - FY2023MitigatedAnnual report
「In operating its information systems, the company is strengthening its security framework by implementing computer virus countermeasures, rigorously managing information, outsourcing operation of its core business systems to a data center, installing firewalls and establishing rules and policies including the Information Management Regulations, Basic Information Security Policy and Information Systems Management Regulations.」
The company has specified concrete measures to address the risk of cyberattacks and critical system failures, including virus protection, data center outsourcing, firewalls and the establishment of multiple rules and policies. - FY2022First statedAnnual report
「If the Group is subject to unauthorized access or a cyberattack resulting in a failure of critical systems or leakage of confidential information, this could affect the Group’s operating results and financial condition.」
The company has explicitly identified system failures and confidential information leaks caused by unauthorized access and cyberattacks as an independent information systems risk.