Risks of Cloud Service Outages, Data Loss and Liability for Damages
First written in FY2022. 1 of 3 entries say "Materialised", first in FY2024. Latest entry: FY2026.
The whole theme swung hardest in 2026: 8 of 36 companies on the "Worse" side.
1 other company's latest entry also says "Other".
- FY2026Priority response as a particularly important riskAnnual report
「The Group's cloud services include services that handle important customer data, such as statutory accounting, management accounting and business management services. If service outages or loss of customer data occur in these services due to cyberattacks, they could have a significant impact on customers' operations.」
Classified the risks of cloud service outages and data loss as particularly important risks requiring priority response in the current fiscal year. Also described mitigation measures including ISMS-compliant management, an information security committee and SOC 2 certification. - FY2024MaterialisedAnnual report
「Recognised losses arising between the Company's customers due to or in connection with unforeseen processing associated with the use of external cloud services.」
For risks involving cloud service failures, data and damages claims, recorded a settlement payment of ¥21.076 million concerning losses between customers and insurance proceeds of ¥14.030 million. Continued to describe redundant backups, multi-factor authentication, SOC 1 Type 2 reports and other risk mitigation measures. - FY2022First statedAnnual report
「The Group's cloud services include services that handle important customer data, such as consolidated accounting and management accounting services. If service outages or loss of customer data occur in these services due to operational problems, failures in the cloud environment, cyberattacks or other causes, they could have a significant impact on customers' operations.」
On the premise of expanding cloud services, newly classified service outages, loss of customer data, damages claims and deterioration in trust and brand value as particularly important risks. Also described measures including redundant backups, multi-factor authentication and obtaining a SOC 1 Type 2 report.