Business Impact Risk from Cyberattacks and Information Leaks
First written in FY2022. 1 of 2 entries say "Mitigated", first in FY2024. Latest entry: FY2024.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
47 other companies' latest entry also says "Mitigated".
- FY2024MitigatedAnnual report
「The Group has established an information security policy and an appropriate information management framework, and takes measures including the installation and updating of appropriate security software, backing up important data and providing regular training.」
The company specified an information security policy, software updates, data backups and regular training as measures to address the risk of cyberattacks and information leaks. - FY2022First statedAnnual report
「If confidential information is leaked or falsified as a result of criminal acts, such as unauthorized intrusion into computer systems by external means including computer viruses and malware, or errors by employees or contractors, the Group's operating performance and financial position could be materially affected through business interruptions, liability for damages and a decline in social credibility.」
The company for the first time separately identified the leakage or falsification of confidential, customer and personal information, and business interruptions, liability for damages and reputational damage caused by cyberattacks and other events as major risks.