Business disruptions caused by system failures, cyberattacks, and other events
First written in FY2022. 1 of 3 entries say "Mitigated", first in FY2023. Latest entry: FY2024.
Merf moved to the "Worse" side of this theme in 2024, 2 years before the typical company in this theme (2026).
The whole theme swung hardest in 2026: 16 of 83 companies on the "Worse" side.
12 other companies' latest entry also says "Worsened".
- FY2024WorsenedAnnual report
「The Group also outsources some system maintenance and other activities to external service providers, including cloud system providers. Accordingly, the Group has taken various measures in response to unforeseen events, including establishing response systems for when failures occur, strengthening system security, and expanding communications lines and hardware. Nevertheless, the Group's operations may be suspended if computer systems or communications networks become unavailable due to human error, cyberattacks, widespread natural disasters, problems involving external service providers or other events. If such a situation continues for an extended period, it may have a material impact, including a decline in confidence in the Group.」
The company explicitly discloses its dependence on external contractors, including cloud service providers, and additionally describes material impacts such as a decline in confidence if a system failure is prolonged. - FY2023MitigatedAnnual report
「Accordingly, the Group has taken various measures in response to unforeseen events, including establishing response systems for when failures occur, strengthening system security, and expanding communications lines and hardware. Nevertheless, the Group's operations may be suspended if computer systems or communications networks become unavailable due to human error, cyberattacks, widespread natural disasters, problems involving external service providers or other events.」
While specifying measures such as establishing response systems for system failures, strengthening security, and expanding communications lines and hardware, the company also describes the residual risk of business interruption. - FY2022First statedAnnual report
「In addition to the Group's heavy reliance on computer systems and communications networks as the foundation for its business operations, the Group recognizes that the importance of addressing system failures and other incidents has increased further with the expansion of remote work in recent years.」
Business interruption caused by system failures, human error, cyberattacks, natural disasters, problems involving external service providers and other events has been disclosed independently for the first time as a major business risk.