Cyberattack and Data Breach Risk
First written in FY2021. 1 of 3 entries say "Mitigated", first in FY2022. Latest entry: FY2024.
The whole theme swung hardest in 2026: 35 of 112 companies on the "Worse" side.
81 other companies' latest entry also says "Restated".
- FY2024RestatedAnnual report
「To address these risks, the Group has established an information security policy and seeks to ensure that it is regularly communicated and implemented. Specific measures against external cyberattacks and information leaks include antivirus measures for all servers and client devices, access restrictions based on authorization levels for information systems such as core systems and groupware, monitoring of email, and restrictions on connections to information devices.」
Measures involving an information security policy, antivirus protection, access restrictions, email monitoring and connection restrictions are continuing. - FY2022MitigatedAnnual report
「To address these risks, the Group has established an information security policy and seeks to ensure that it is regularly communicated and implemented. Specific measures against external cyberattacks and information leaks include antivirus measures for all servers and client devices, access restrictions based on authorization levels for information systems such as core systems and groupware, monitoring of email, and restrictions on connections to information devices.」
The Company identifies an information security policy, antivirus measures, access restrictions, email monitoring and connection restrictions as specific measures against the risks of cyberattacks and information leaks. - FY2021First statedAnnual report
「If confidential or customer information is leaked as a result of a cyberattack or other attack from outside the Group, the Group may be subject to claims for damages from customers and business partners and may incur costs to respond to the incident. Such an incident could also have a significant impact on the Group's social credibility.」
Claims for damages, response costs and impacts on social credibility arising from cyberattacks and information leaks are described independently as a risk for the first time.