Information Systems Defense through the Group's ISMS and CSIRT
First written in FY2023. 1 of 2 entries say "Advanced", first in FY2026. Latest entry: FY2026.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「The Group has organized a CSIRT and established and operates an incident response structure based on defined procedures. In addition, it has introduced EASM to identify and manage externally exposed assets and SSPM to manage the security status of SaaS configurations and permissions. It has also introduced SACBT to improve employees' security awareness and conducts training once each quarter, combining technical, operational and personnel measures to strengthen its defenses.」
In addition to the existing ISMS and CSIRT, the company introduced EASM, SSPM and SACBT, expanding its internal defense measures to include technical, operational and personnel measures, including quarterly training. - FY2023First statedAnnual report
「The company has obtained ISO 27001 (ISMS) certification by ensuring the implementation and operation of, and continuously improving, its information security management system across the company. It has also organized a CSIRT headed by its CISO and works to protect the Group's own systems.」
Separately from its customer-facing security business, the company has disclosed an internal defense framework to prevent information loss, tampering, leakage and system outages within the Group.