Information Security Incidents Caused by Cyberattacks and Other Events
First written in FY2021. 2 of 4 entries say "Mitigated", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
14 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「Specifically, the Company conducts employee education and targeted email attack training, security vulnerability assessments and countermeasures for IT and OT (Operational Technology) environments, and introduces applications that prevent unauthorised programs from running on computers and servers, in an effort to prevent system failures caused by virus infections and cyberattacks and information leaks outside the Group.」
The Company has expanded its information security measures to include vulnerability assessments of IT and OT environments, applications that prevent unauthorised programs from running, and targeted email training. - FY2023MitigatedAnnual report
「Specifically, the Company conducts employee education and targeted email attack training, security vulnerability assessments, and introduces whitelist-based security software. It also backs up protected information assets and maintains cyber insurance, among other measures, to prevent system failures caused by virus infections and cyberattacks and information leaks outside the Group.」
The Company has translated its information security risk measures into employee education and training, vulnerability assessments, software, backups, insurance and an emergency response structure. - FY2022MitigatedAnnual report
「The Group has established the Group Basic Information Security Policy and is strengthening information security management. It is also taking measures against system failures caused by virus infections and cyberattacks, and information leaks outside the Group, through employee training and security vulnerability assessments, among other initiatives.」
The Company has put in place specific measures against risks such as cyberattacks through a basic policy, training and vulnerability assessments. - FY2021First statedAnnual report
「The Group mainly builds its business systems on private clouds. If information security incidents caused by cyberattacks or other events occur, business operations could be disrupted.」
Cyberattacks, system failures and information leaks affecting business systems on private clouds are identified as key risks.