Establishment of an Information Security Management Framework
First written in FY2017. 4 of 6 entries say "Advanced", first in FY2020. Latest entry: 2026-10-15.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- 2026-10-15AdvancedOccurring Fact
「本社（当社）のセキュリティスペシャリスト及びサーバースペシャリストによる、セキュリティ強化対策の実行・検証の支援」
情報セキュリティ管理について、本社の専門人材によるセキュリティ強化対策の実行・検証支援が再発防止策として具体化された。 - FY2022AdvancedAnnual report
「The Company has also implemented various measures against external intrusion and attacks, including cyberattack countermeasures, network management and the introduction of security systems for entry to and exit from facilities, strengthened its operational monitoring framework, and continuously reviews these measures. In developing its products, it works to enhance information security by defining and operating development processes and quality manuals, conducting reviews by technical specialists in the security field, and regularly commissioning third-party vulnerability assessments.」
In addition to the existing certifications, education and cyberattack countermeasures, the strengthening of the operational monitoring framework and regular third-party vulnerability assessments have been added as specific measures. - FY2021AdvancedAnnual report
「In April 2019, the Company obtained certification under the international standards for information security management systems, ISO/IEC 27001:2013 and JIS Q 27001:2014. It operates and strengthens its information management framework in accordance with applicable laws and regulations and its privacy policy concerning the management of personal information, and conducts internal education and awareness activities to raise employee awareness.」
Specific disclosures have been made regarding certification under ISO/IEC 27001 and other standards, the operation and enhancement of the information management framework, and internal education. - FY2020AdvancedAnnual report
「Accordingly, the Company regards information management as an important management matter and conducts internal education and awareness activities to strengthen its information management framework in line with applicable laws and regulations and to raise employee awareness. It has also implemented various measures against external intrusion and attacks, including cyberattack countermeasures, network management and the introduction of security systems for entry to and exit from its facilities.」
In addition to the existing basic policy and committee, specific measures such as cyberattack countermeasures, network management and security systems for entry to and exit from facilities have been disclosed. - FY2018RestatedAnnual report
「With respect to information security, the Company formulates an Information Security Basic Policy, Information Security Guidelines and other policies, and develops an information security management framework through the establishment and operation of an Information Security Committee. It works to maintain, use and manage information assets safely and appropriately.」
The policy of developing a management framework based on the basic policy, guidelines and the Information Security Committee continues. - FY2017First statedAnnual report
「With respect to information security, the Company formulates an Information Security Basic Policy, Information Security Guidelines and other policies, and develops an information security management framework through the establishment and operation of an Information Security Committee. It works to maintain, use and manage information assets safely and appropriately.」
An information asset management framework based on an Information Security Basic Policy, guidelines and the establishment of a committee has been identified for the first time.