IT security and information management risks
First written in FY2019. 4 of 6 entries say "Mitigated", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2026: 34 of 109 companies on the "Worse" side.
75 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「Assuming that threats may exist across all internal and external networks and devices, the Group has established systems to respond to cyberattacks and operates 24-hour, 365-day monitoring of its networks and computers. It has also established a CSIRT (Computer Security Incident Response Team) to respond promptly and appropriately when a security incident occurs, and has put in place a structure for emergencies.」
The Group has reconfirmed its cyberattack response systems, 24-hour, 365-day monitoring, and CSIRT response structure. - FY2024MitigatedAnnual report
「Assuming that threats may exist across all internal and external networks and devices, the Group has established systems to respond to cyberattacks and operates 24-hour, 365-day monitoring of its networks and computers. It has also established a CSIRT (Computer Security Incident Response Team) to respond promptly and appropriately when a security incident occurs, and has put in place a structure for emergencies.」
The Group explicitly described its cyberattack response systems, 24-hour, 365-day monitoring, and CSIRT as measures to address IT security risks. - FY2023MitigatedAnnual report
「To prepare for these risks, the Group works to reduce them by establishing and communicating relevant policies and procedures, providing security training to employees, and implementing measures to protect against cyberattacks and system failures, including prevention, monitoring, response and recovery preparations.」
The Group has reiterated its policies and procedures, training, and prevention, monitoring, response and recovery preparations for IT security and information management risks. - FY2021MitigatedAnnual report
「To prepare for these risks, the Group works to reduce them by establishing and communicating relevant policies and procedures, providing security training to employees, and implementing measures to protect against cyberattacks and system failures, including prevention, monitoring, response and recovery preparations.」
The Group has reiterated its policies and procedures, training, and prevention, monitoring and recovery preparations for IT security and information management risks. - FY2020MitigatedAnnual report
「To prepare for these risks, the Group works to reduce them by establishing and communicating relevant policies and procedures, providing security training to employees, and implementing measures to protect against cyberattacks and system failures, including prevention, monitoring, response and recovery preparations.」
For IT security and information management risks, the Group has established and communicated policies and procedures, provided employee training, and implemented prevention, monitoring, response and recovery preparations. - FY2019First statedAnnual report
「The Group uses various information systems, and its operations may be disrupted by system failures, cyberattacks and other events. It also holds a large amount of confidential information, including personal information. If this information were to be leaked outside the Group as a result of an accident or other event, business performance could be affected through such factors as liability for damages and damage to social credibility.」
System failures, cyberattacks, and the leakage of confidential and personal information were explicitly identified as business risks for the first time.