Risk to business continuity from cyberattacks and unauthorized access
First written in FY2020. 3 of 5 entries say "Mitigated", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2020: 2 of 13 companies on the "Worse" side.
1 other company's latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「In FY2025, we established a Cybersecurity Countermeasures Headquarters and a framework for prompt and appropriate recovery responses in preparation for contingencies, including the occurrence of cybersecurity incidents involving critical information systems.」
In addition to the existing common standards, training, and manual development, we established a Cybersecurity Countermeasures Headquarters and developed a response framework, including training for management. - FY2025MitigatedAnnual report
「To enable a prompt and appropriate response when a security incident occurs, we have begun establishing an internal framework and response manuals. We are also working to improve our incident response capabilities by conducting regular response training for management.」
As additional measures to address cyber risks, we have begun establishing an incident response framework and manuals and have introduced training for management. - FY2023MitigatedAnnual report
「Our Group is working to establish an IT security framework and improve security across the Group based on common Group-wide standards. We provide information security training to employees and are working to ensure the proper management and operation of internal information assets.」
We have continued to address the risks of cyberattacks and unauthorized access through common standards, an IT security framework, employee training, and information asset management. - FY2022MitigatedAnnual report
「Our Group is working to establish an IT security framework and improve security across the Group based on common Group-wide standards. We provide information security training to employees and are working to ensure the proper management and operation of internal information assets.」
Measures to address the risks of cyberattacks and unauthorized access have been specified, including common Group-wide standards, an IT security framework, employee training, and information asset management. - FY2020First statedAnnual report
「However, if external cyberattacks or unauthorized access, unexpected system failures, or security issues result in the suspension of data processing, or the theft, destruction, alteration, loss or other compromise of data, there is a risk of adverse effects on our Group's social credibility and business continuity.」
The impact of cyberattacks, unauthorized access, and system failures on data and business continuity is identified as a standalone risk.