Information security, unauthorized access and confidential information leakage risks
First written in FY2018. 1 of 3 entries say "Mitigated", first in FY2019. Latest entry: FY2020.
The whole theme swung hardest in 2026: 33 of 105 companies on the "Worse" side.
82 other companies' latest entry also says "Restated".
- FY2020RestatedAnnual report
「The company, its domestic subsidiaries and its Philippine subsidiaries have obtained Information Security Management System (ISMS) certification to prepare for threats including damage from unauthorized access and computer viruses, and information leakage by insiders or outsourced service providers. They also conduct a regular ISMS controls check once a month and systematically and continuously raise awareness among all officers and employees.」
Continues to state the measures consisting of ISMS certification, monthly controls checks and continuous awareness-raising among all officers and employees. - FY2019MitigatedAnnual report
「The company, its domestic subsidiaries and its Philippine subsidiaries have obtained Information Security Management System (ISMS) certification to prepare for threats including damage from unauthorized access and computer viruses, and information leakage by insiders or outsourced service providers. They also conduct a regular ISMS controls check once a month and systematically and continuously raise awareness among all officers and employees.」
In addition to ISMS certification, explicitly states that the company conducts monthly controls checks and continuously raises awareness among all officers and employees, detailing its response to unauthorized access, viruses and information leakage. - FY2018First statedAnnual report
「In conducting its business, the group has opportunities to access various types of confidential information, including customers' corporate information and personal information held by customers. It has established rules on the protection of personal information and the management of corporate confidential information, obtained Information Security Management System (ISMS) certification, and appropriately handles and strictly manages information. However, if such information were to leak outside the group, this could affect the group's business performance and financial position through reputational damage and liability for compensation, among other consequences.」
Explicitly identifies information security risks covering customer corporate information and personal information generally, not only medical information. The company states that it has established internal rules and obtained ISMS certification as countermeasures.