Strengthening Controls for Personal and Confidential Information
First written in FY2022. 2 of 4 entries say "Advanced", first in FY2023. Latest entry: FY2024.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2024AdvancedAnnual report
「The Company also undergoes checks by financial institutions to confirm that its framework is established and operated in accordance with the FISC Safety Measures Standards, which are used by the Financial Services Agency when inspecting financial institutions’ system management frameworks, and the Guidelines for the Protection of Personal Information in the Financial Sector. It also undergoes audits by audit and supervisory committee members and internal audit personnel.」
In addition to existing rules, training, vulnerability assessments and access restrictions, the Company is described as undergoing confirmation by financial institutions of its compliance with FISC standards and other requirements, as well as audits, further specifying its management framework. - FY2023AdvancedAnnual report
「The Company conducts regular vulnerability assessments of applications used for its principal services through external security providers, limits the individuals who can access databases containing confidential information, and records access histories. It has implemented these and other measures to prevent unauthorized external access and to prevent its employees from becoming involved in information leaks.」
In addition to existing rules, training and security systems, specific information management measures, including vulnerability assessments, access restrictions and access-history logging, are described. - FY2023-Q3RestatedAnnual report
「The funds are planned to be allocated to the development of a personal information management data platform and the establishment of distributed cryptographic key management technology.」
The planned allocation of funds to a personal information management data platform and distributed cryptographic key management technology is stated, reaffirming specific measures to strengthen the management framework for personal and confidential information. - FY2022First statedAnnual report
「The Company will continue to strengthen information management and its related framework.」
The policy is to strengthen information management through ISO/IEC 27001, JIS Q 27001, internal rules, training and security systems, among other measures.