Information System Failures
First written in FY2016. 3 of 9 entries say "Worsened", first in FY2021. Latest entry: FY2025.
19 other companies' latest entry also says "Mitigated".
- FY2025MitigatedAnnual report
「To mitigate these risks, the company is strengthening monitoring for unauthorised access and anomaly detection by improving availability through the use of cloud services and introducing EDR (Endpoint Detection and Response) and SOC (Security Operation Center) services. It is also establishing a framework for rapid response to increasingly sophisticated cyberattacks through the use of MDR (Managed Detection and Response) services. In addition, it has formulated an IT-BCP (business continuity plan) and is working to strengthen its framework for maintaining operations in the event of system failures.」
In addition to cloud services, EDR, SOC and MDR, the company explicitly identifies its IT-BCP and is expanding measures for monitoring, detection, response and business continuity in relation to information-system failures and cyberattacks. - FY2022MitigatedAnnual report
「The Group is working to strengthen its monitoring framework against unauthorised access by migrating to cloud services and using SOC (Security Operation Center) and MDR (Managed Detection and Response) services to mitigate these risks. In addition, it established an Information Security Committee in 2022 and is working to strengthen its framework through employee training, email drills, internal audits and external risk assessments.」
While disclosing costs incurred as a result of the cyberattack, the company has added measures including the introduction of MDR services, establishment of an Information Security Committee, and training, drills, audits and external assessments. - FY2022-Q3WorsenedAnnual report
「In North America, customer production adjustments continued due to the impact of shortages of components such as semiconductors and disruptions to logistics networks. Although sales in local-currency terms declined 5.7%, net sales increased partly due to the weaker yen, to ¥7,893 million (¥7,087 million in the same quarter of the previous year). Operating income was ¥94 million (¥130 million in the same quarter of the previous year), following the recognition of ¥96 million in special expenses, including logistics and countermeasure costs, related to the cyberattack on Nichirin-Flex USA, Inc.」
Logistics, countermeasure and other costs related to the cyberattack on the North American subsidiary amounted to ¥96 million, up from the ¥59 million reported in the previous quarter. Operating income was also below the same period of the previous year. - FY2022-Q2MaterialisedAnnual report
「North America: In the North American market, customer production adjustments continued because of shortages of semiconductors and other parts and disruptions to logistics networks. Although sales in local-currency terms declined 10.4%, sales increased partly because of the weaker yen, to ¥4,998 million (¥4,864 million in the same quarter of the previous year). Operating profit was ¥10 million (¥110 million in the same quarter of the previous year), following the recording of ¥59 million in extraordinary expenses, including logistics and response costs, related to a cyberattack on Nichirin-Flex U.S.A., Inc.」
A cyberattack actually occurred at a North American subsidiary, and ¥59 million in extraordinary expenses was recorded for logistics, response and other costs. - FY2022-Q1WorsenedAnnual report
「While manufacturers that reduced production last year due to shortages of semiconductors and other parts recovered through catch-up production, some manufacturers continued to adjust production because of disruptions to parts supplies and logistics networks, aftershocks from the Great East Japan Earthquake and cyberattacks.」
The disclosure states that some automakers adjusted production because of cyberattacks, showing that information system failures materialized as an event affecting automobile production. - FY2021WorsenedAnnual report
「Almost all of our Group's operations depend on information systems, and any problems could affect operations such as sales and production.」
Dependence on information systems is described more specifically than before as covering "almost all operations," clarifying the scope of the operational impact in the event of a failure. - FY2020RestatedAnnual report
「To mitigate this risk, our Group is working to strengthen its monitoring framework for unauthorized access by migrating to cloud services and using SOC services (Security Operation Center).」
The disclosure specifies migration to cloud services and stronger monitoring through SOC services as countermeasures against information system failure risks. - FY2019RestatedAnnual report
「Although our Group works to protect its systems and data, including by strengthening security to prevent problems, information system failures caused by external factors such as disasters or by viruses could occur.」
The disclosure continues to address the impact of information system failures on operations and countermeasures involving security and data protection. - FY2016First statedAnnual report
「Information systems are becoming increasingly important to our Group's administrative operations, and any problems could affect operations such as sales and production. Although our Group works to protect its systems and data, including by strengthening security to prevent problems, information system failures caused by external factors such as disasters or by viruses could affect our business activities, depending on their scale.」
The disclosure identifies information system failures that could affect sales and production operations as a risk, with enhanced security and system and data protection cited as countermeasures.