Risk of Information-System Failures and Cyberattacks
First written in FY2017. 4 of 8 entries say "Mitigated", first in FY2019. Latest entry: FY2026.
The whole theme swung hardest in 2020: 2 of 8 companies on the "Worse" side.
6 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「In addition to its existing measures, the company established a red team structure to proactively identify potential vulnerabilities within the company and enable a rapid response.」
The cybersecurity response was developed into group-wide visibility of the situation, attack surface management and the establishment of a red team structure. - 2026-05-20AdvancedGeneral Meetings of Shareholders
「During the current fiscal year, to visualize security risks across the Group, we conducted self-assessments of security measures for each system and monitored the assessment results. We also selected systems for priority assessment and conducted third-party evaluations of their security measures.」
Information-security measures progressed beyond education and training to concrete system self-assessments, monitoring and third-party evaluations. - FY2025MitigatedAnnual report
「Strengthening governance under the new major operating company structure, further strengthening attack surface management as use of cloud services and other technologies expands, and embedding security by design in system development」
The company put its response into concrete form through cross-functional meetings and joint drills following the change in the operating company structure, vulnerability detection, security training and other measures. - FY2021RestatedAnnual report
「During the period, the company continued implementing cybersecurity measures, including security training and targeted-attack email drills.」
The company continued to address information system disruption and cyberattack risks through education and training. - FY2020MitigatedAnnual report
「During the consolidated fiscal year, the company implemented cybersecurity measures, including enhanced security training and targeted-attack email drills.」
As a response to information system disruption and cyberattack risks, the company conducted security training and targeted-attack email drills. - FY2019MitigatedAnnual report
「During the period, to strengthen cybersecurity across the JXTG Group, the company revised the Information Security Basic Regulations to the JXTG Group Information Security Basic Regulations and communicated the revised regulations throughout the group.」
As a response to information system and cyberattack risks, the company revised the regulations into group-wide rules and communicated them throughout the group. - FY2018RestatedAnnual report
「Unexpected disruptions to information systems caused by earthquakes and other natural disasters, accidents including cyberattacks, or other events could result in business stoppages.」
The risks of information system outages and cyberattacks affecting production, sales, accounting and other activities continue to be disclosed. - FY2017First statedAnnual report
「Unexpected disruptions to information systems caused by earthquakes and other natural disasters, accidents including cyberattacks, or other events could result in business stoppages.」
The company identifies the risk of system outages and business interruptions arising from dependence on electronic data for production, sales, accounting and other activities.