Risk of corporate information leaks and unauthorized access
First written in FY2017. 4 of 7 entries say "Mitigated", first in FY2018. Latest entry: FY2024.
The whole theme swung hardest in 2026: 25 of 90 companies on the "Worse" side.
29 other companies' latest entry also says "Mitigated".
- FY2024MitigatedAnnual report
「The Group uses a system developed in-house as its core system and has established backup arrangements to ensure the system's availability in the event of an emergency. To manage this information, the Group has obtained ISO 27001 (ISMS certification), established internal rules including the Information Security Regulations, Confidentiality Management Regulations and Regulations for the Handling of Personal Information, and works to ensure compliance with them.」
Describes in-house system backups, ISMS certification and information management regulations as measures to address information leaks and unauthorised access. - FY2022RestatedAnnual report
「The Group has established an Information Security Committee headed by the Group Corporate Division Head as the person responsible for information management. It has developed an information security management structure and rules, and implemented measures including employee training to improve information security literacy, vendor management, monitoring of information handling, including by outsourced parties, analysis of risk incidents, responses as needed to tighter regulations including those concerning personal information protection, and strengthened technical measures.」
Reiterates measures against information leaks including ISMS, the Information Security Committee, employee training, vendor management and monitoring. - FY2021MitigatedAnnual report
「The Group has obtained ISO 27001 (ISMS certification), established internal rules including the Information Security Rules, Confidential Information Management Rules and Personal Information Handling Rules, and works to ensure compliance with them. It has also established an Information Security Committee headed by the Group Corporate Division Head as the person responsible for information management,」
Expands response measures including ISMS certification, the Information Security Committee, employee training, vendor management and monitoring. - FY2020RestatedAnnual report
「For the management of this information, the Group has established internal rules including the Information Security Rules, Confidential Information Management Rules and Personal Information Handling Rules, and works to ensure compliance with them. However, if information is leaked due to human or technical errors, or illegal or unauthorized access, this may affect the Group's business, operating results and financial condition through claims for damages, a decline in social credibility and other consequences.」
Reiterates measures under the Information Management Rules, Confidential Information Management Rules and Personal Information Handling Rules, as well as the risks of information leaks and unauthorized access. - FY2019MitigatedAnnual report
「January 2019 ISMS certification obtained at all locations」
Describes the progression in response to information management risks from certification at some locations to certification at all locations. - FY2018MitigatedAnnual report
「January 2018 Partial ISMS certification obtained」
Describes the specific achievement of obtaining partial ISMS certification during the fiscal year in response to information management risks. - FY2017First statedAnnual report
「If information is leaked due to human or technical errors, or illegal or unauthorized access, this may affect the Group's business, operating results and financial condition through claims for damages, a decline in social credibility and other consequences.」
Also lists measures including backup systems, information security rules and confidential information management rules.