Strengthening Risk Management and ISMS
First written in FY2021. 3 of 6 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
22 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「The Group continues to provide in-house education, including training based on simulated targeted email attacks, and conduct regular audits under its internal audit plan, thereby continuously strengthening its company-wide risk management framework.」
The Group continues risk management based on 5 major risk categories, ISMS, AI-enabled network monitoring, targeted email attack training and regular audits. - FY2025RestatedAnnual report
「We are working as a group to reduce information risk through AI-based network monitoring.」
Risk management through the five major risks, ISMS, training, regular audits and AI-based network monitoring continues. - FY2024AdvancedAnnual report
「We are working as a group to reduce information risk through AI-based network monitoring.」
In addition to management through the five major risks, ISMS, training and regular audits, AI-based network monitoring has been disclosed as an information-risk measure. - FY2023RestatedAnnual report
「Our group has established a risk and compliance committee as an enterprise-wide risk management structure, including sustainability-related risks, and enacted the “Crisis Management Regulations,” thereby building a structure for cross-organizational risk management.」
The enterprise-wide management structure based on the five major risks, ISMS, internal training and regular audits, the risk and compliance committee and the Crisis Management Regulations continues. - FY2022AdvancedAnnual report
「We continue to provide internal training as needed and conduct regular audits based on the internal audit plan, thereby continuously strengthening the risk management structure.」
In addition to the five major risks, ISMS based on ISO/IEC 27001, internal training and regular audits, a risk and compliance committee has been established to formalize the management structure. - FY2021First statedAnnual report
「Our group recognizes five principal risks: strategic risk, disaster risk, operational risk, financial risk and information risk. We believe it is necessary to avoid these risks in advance and minimize damage if any risk materializes.」
We recognize five major risk categories and are advancing risk identification, training, internal audits and information-risk reduction based on ISO/IEC 27001.