Risk to Information Assets and of System Failures Caused by Cyberattacks and Disasters
First written in FY2018. 1 of 3 entries say "Mitigated", first in FY2022. Latest entry: FY2024.
Japan Tobacco moved to the "Worse" side of this theme in 2025, the same year as the typical company in this theme.
5 other companies' latest entry also says "Worsened".
- FY2024WorsenedAnnual report
「Attacks involving unauthorized access and computer viruses are becoming more complex and sophisticated as digital technology develops. If unforeseen circumstances such as unauthorized access to or attacks on the Group or its suppliers, or disasters, result in system failures or the leakage of confidential information, the Group's performance may be adversely affected through the temporary suspension of information systems, declining public confidence, loss of competitive advantage and costs incurred to respond appropriately to the incident.」
Regarding cyber risks, the company explicitly identified attacks on suppliers in addition to the increasing complexity and sophistication of attack methods, thereby broadening the scope of potential impacts. - FY2022MitigatedAnnual report
「The Group has established information security rules to clarify its approach to information security and to promote comprehensive and continuous information security measures, and is working to properly manage and protect information assets such as the systems and data it holds. The Group is also working to strengthen information security through both hardware and software measures. On the hardware side, it continuously conducts inspections and improvements of the technology and operations related to the security of critical systems. On the software side, it works to provide security education for employees, including information security e-learning for all employees.」
As measures to address information security risks, the company specifically described the establishment of rules, inspections and improvements of critical systems, and e-learning for all employees. quantified is false, materialized is false. - FY2018First statedAnnual report
「However, if unforeseen circumstances such as unauthorized access, attacks involving computer viruses or disasters result in the leakage of confidential information or system failures, the Group's performance may be adversely affected.」
The company newly identified leakage of confidential information and system failures caused by unauthorized access, computer viruses and disasters as a standalone business risk.