Development of an Information Security Management System
First written in FY2018. 2 of 6 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2021: 2 of 13 companies on the "Worse" side.
0 other companies' latest entry also says "Achieved".
- FY2026AchievedAnnual report
「As part of further strengthening the security framework to prevent recurrence, we completed a review of the settings for the WAF (Web Application Firewall) currently in use on 11 September 2025, and on 16 December completed the migration to a new administrator interface, which is easier to secure and had been under development since 2022, as well as the retirement of the former administrator interface. In addition, on 16 March 2026, we completed implementation of login notifications and enhanced display of login history for the corporate administration interface. With this, all planned measures to prevent recurrence have been completed.」
The review of the WAF settings following the unauthorized access, migration to the new administrator interface and retirement of the former interface, and enhancement of login notifications and history display were completed, bringing all planned measures to prevent recurrence to completion. - FY2025AdvancedAnnual report
「The unauthorized access routes have already been blocked, and suspicious operations and processes by the attackers have been stopped. On 7 May, we reported the cyberattack damage to the relevant police station, where it was accepted as a case consultation, and on the same day made a timely disclosure apologizing for and reporting the incident. To prevent recurrence, we plan to further strengthen our security framework, review the settings of the WAF (Web Application Firewall) currently in use, and migrate to a new administrator interface that is easier to secure, a transition that has been underway since 2022, during fiscal 2025.」
The measures following the unauthorized access were specified, including blocking the access routes, reporting the damage to the police, reviewing the WAF settings, and the planned migration to a new administrator interface during fiscal 2025. - FY2023AdvancedAnnual report
「March 2023 Obtained ISO 27001 certification, the international standard for information security management systems (ISMS)」
In addition to the existing operation under the Information Security Basic Regulations and the committee, concrete progress in the information security management system was disclosed through the acquisition of ISO 27001 certification. - FY2022RestatedAnnual report
「With respect to information security, based on the Information Security Basic Regulations, we will establish an information security management system that clarifies responsibility for information security and continuously implements measures to maintain and improve information security. Specific information security measures will be deliberated by the Information Security Committee and promoted across our group.」
The framework comprising the Information Security Basic Regulations, responsibility structure, Information Security Committee, and group-wide implementation was reiterated. - FY2019RestatedAnnual report
「We will establish an information security management system that clarifies responsibility for information security and continuously implements measures to maintain and improve information security. Specific information security measures will be deliberated by the Information Security Committee and promoted across our group.」
The clarification of responsibility and group-wide measures through the Information Security Committee were reiterated. - FY2018First statedAnnual report
「We will establish an information security management system that clarifies responsibility for information security and continuously implements measures to maintain and improve information security. Specific information security measures will be deliberated by the Information Security Committee and promoted across our group.」
A framework for clarifying responsibility and advancing group-wide information security measures through the Information Security Committee was described.