Strengthening the Information Security Management Framework
First written in FY2016. 6 of 9 entries say "Advanced", first in FY2017-Q2. Latest entry: FY2025.
4 other companies' latest entry also says "Advanced".
- FY2025AdvancedAnnual report
「To prevent information leaks, and as part of efforts to strengthen its risk management framework, the Company obtained certification of conformity with ISO/IEC 27001:2022, the global standard for information security management, and Japan's JIS Q 27001:2023, covering all Group offices. It was the first listed payment processing services company to do so.」
The Company obtained certification of conformity with ISO/IEC 27001:2022 and JIS Q 27001:2023 for all offices in relation to information security management. It also obtained its latest PCI DSS certification in December 2024. - FY2024AdvancedAnnual report
「PCI DSS, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA, was first certified in December 2008. The Company has conducted annual recertification audits since then and obtained its latest certification in December 2023.」
The Company obtained its latest PCI DSS certification in December 2023, continuing its annual recertification audits. - FY2022AdvancedAnnual report
「PCI DSS, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA, was first certified in December 2008. The Company has conducted annual recertification audits since then and obtained its latest certification in December 2021.」
The Company stated that it has continued annual PCI DSS recertification audits and obtained its latest certification in December 2021. - FY2021AdvancedAnnual report
「PCI DSS, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA, was first certified in December 2008. Following 12 annual recertification audits, the Company obtained its latest certification in December 2020.」
The Company obtained its latest PCI DSS certification in December 2020 after undergoing 12 annual recertification audits. - FY2019AdvancedAnnual report
「PCI DSS, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA, was first certified in December 2008. Following 10 annual recertification audits, the Company obtained its latest certification in December 2018.」
The Company stated that it obtained its latest PCI DSS certification in December 2018 after undergoing 10 annual recertification audits. - FY2018RestatedAnnual report
「PCI DSS, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA, was first certified in December 2008. Following 9 annual recertification audits, the Company obtained its latest certification in December 2017.」
The Company continues to operate an information security management framework combining certifications and audits such as ISO/IEC 27001, PCI DSS and the Privacy Mark. - FY2017-Q3RestatedAnnual report
「Going forward, the Company will continue to strengthen security by steadily implementing technical and organisational enhancements across the Company, based on the findings of the recurrence-prevention committee, and will work to restore customer trust.」
The Company is reaffirming its policy of continuing technical and organisational enhancements and efforts to restore customer trust based on the recurrence-prevention committee's report. - FY2017-Q2AdvancedAnnual report
「The Company determined that an objective, expert investigation, review and assessment with greater fairness and transparency were necessary to establish the facts, identify the causes and formulate measures to prevent recurrence. Accordingly, it established a recurrence-prevention committee comprising external experts on 14 March 2017 and published on 1 May 2017 a report based on its investigation through 30 April 2017. Going forward, the Company will continue to strengthen security by steadily implementing technical and organisational enhancements across the Company, based on the findings of the recurrence-prevention committee, and will work to restore customer trust.」
Following the information-leak incident, the Company established a recurrence-prevention committee including external experts and published an investigation report. It also specified future technical and organisational enhancements and efforts to restore trust. - FY2016First statedAnnual report
「To prevent information leaks, and as part of efforts to strengthen its risk management framework, the Company obtained certification of conformity with ISO/IEC 27001:2013, the global standard for information security management, and Japan's JIS Q 27001:2014, covering all of its offices. It was the first listed payment processing services company to do so. The Company also fully complies with PCI DSS Version 3.1, the global security standard for the payment card industry jointly established by the five international credit card brands JCB, American Express, Discover, MasterCard and VISA.」
The Company details information management enhancement measures as a separate issue, combining ISO/IEC 27001, PCI DSS, the Privacy Mark and 24-hour monitoring.