Information Security Risks from Cyberattacks and System Outages
First written in FY2021. 2 of 4 entries say "Advanced", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
15 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「As initiatives to improve security across the entire supply chain, the Company is working to strengthen its security measures by assessing the security measures of business partners and partner companies, monitoring employees' handling of information to detect and prevent internal misconduct at an early stage, and establishing 24/7 incident monitoring by an external SOC (Security Operation Center) and a specialist support framework to strengthen its response in the event of an emergency.」
In addition to the existing committee, IT-BCP, education, CSIRT and external SOC, the Company explicitly disclosed assessments of the security measures of business partners and partners and monitoring for internal misconduct, expanding the scope of its response. - FY2025AdvancedAnnual report
「The Company is strengthening its security measures by establishing 24/7 incident monitoring by an external SOC (Security Operation Center) and a specialist support framework, among other measures.」
In addition to the existing Information Security Committee, IT-BCP and CSIRT, 24/7 monitoring by an external SOC and specialist support were established. - FY2023MitigatedAnnual report
「The Group has established an Information Security Committee and developed and communicated relevant policies and regulations, implemented technical measures such as detecting and preventing unauthorized access, developed and conducted drills for an IT-BCP, provided security education and training to all directors, officers and employees of the Group, and established a framework to minimize damage when security incidents occur, including by establishing a CSIRT (Computer Security Incident Response Team).」
The response framework was made more concrete, including the Information Security Committee, IT-BCP, education and training, CSIRT, and regular assessment and improvement, advancing the response to the risk. - FY2021First statedAnnual report
「If damage occurs from increasingly sophisticated cyberattacks, system outages caused by unforeseen events, or the leakage or destruction of critical information, business performance could be adversely affected by production stoppages, liability for damages and loss of trust.」
Information security risk was disclosed as an independent item for the first time, together with the Information Security Committee, intrusion detection and prevention, education and training, and the incident response framework operated by CSIRT.