Development of Information Security Rules and Policies and Education and Training
First written in FY2021. 2 of 4 entries say "Advanced", first in FY2023-Q2. Latest entry: 2026-05-26.
65 other companies' latest entry also says "Advanced".
- 2026-05-26AdvancedGeneral Meetings of Shareholders
「Regarding cybersecurity, we have revised information security-related rules and other provisions and established a framework for an information security management system using external specialist organizations.」
In addition to the previous disclosures on establishing information security rules and providing training, the disclosure specifically describes revisions to the rules and the establishment of a management system using external specialist organizations. - FY2024RestatedAnnual report
「With regard to information security incidents, including cyberattacks, the Group has taken the necessary measures to prevent recurrence of the system failure that occurred in February 2022. However, as incidents become increasingly complex, it recognizes that strengthening its response remains an important issue.」
While continuing measures to prevent recurrence following the cyberattack in February 2022, the Group reaffirmed that strengthening its response to increasingly complex incidents is an important issue. - FY2023-Q2AdvancedAnnual report
「Subsequently, the Group established an internal headquarters for addressing unauthorized access and worked on investigations, countermeasures, and recovery. As a result, its internal systems have been fully operational since August this year. The Group will continue to promote further security enhancements.」
The Group established an internal headquarters for addressing unauthorized access after the cyberattack and proceeded with investigations, countermeasures, and recovery. As a result, its internal systems became fully operational from August 2022. It states that it will further promote security enhancements. - FY2021First statedAnnual report
「The Group has established and operates various information security policies and promotes the proper handling of information and information equipment through training and other measures for officers and employees.」
The Group explicitly identified the establishment and operation of information security policies and training for officers and employees as response measures.