Information Security Risks Including Cyberattacks and Information Leaks
First written in FY2024. 2 of 3 entries say "Mitigated", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2026: 26 of 91 companies on the "Worse" side.
28 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「With regard to the use of AI within the company, we strictly limit use to tools approved by the company and require that the tools be used with settings that prevent the AI from learning from or externally disclosing input information. In addition, we have established internal rules for the appropriate use of AI, including a prohibition on entering personal or confidential information into AI systems, and are working to communicate and enforce these rules among all employees.」
In addition to existing measures against cyberattacks and information leakage, management controls were added to restrict AI tools, prevent the external disclosure of input information and prohibit the entry of confidential information. - FY2025MitigatedAnnual report
「Accordingly, we block unauthorized communications using firewalls, introduce next-generation antivirus software, monitor unauthorized access, conduct email filtering, apply security patches and perform security assessments, among other measures, and also conduct regular system recovery drills based on our recovery plan.」
Our response to the risks of cyberattacks and information leakage was made more specific by combining technical measures, monitoring, training, targeted attack email training and a recovery plan. - FY2024First statedAnnual report
「Our group recognizes business interruption and information leakage resulting from cyberattacks as material risks.」
Information security was newly identified as a separate item under business and other risks, with measures including firewalls, antivirus protection, unauthorized-access monitoring, email training and recovery training described.