Reputational and Business Disruption Risks from Information Leaks and Cyberattacks
First written in FY2021. 2 of 4 entries say "Reframed", first in FY2024. Latest entry: FY2026.
Envipro Holdings moved to the "Worse" side of this theme in 2024, 2 years before the typical company in this theme (2026).
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
2 other companies' latest entry also says "Reframed".
- FY2026Addition of information, copyright and external service dependency risks associated with the use of generative AIAnnual report
「The company has also established a policy on the use of generative AI, regularly monitors usage, and seeks to establish an appropriate risk management framework by ensuring that guidelines for use reflecting risks such as information leakage and copyright infringement are widely understood and followed, while imposing restrictions on the input of confidential and personal information.」
Information leakage and cyberattack risks have been reorganised to include generative AI-related information leakage and copyright infringement, changes in the assumptions underlying its use, and dependence on external AI services and cloud infrastructure. - FY2024ReframedAnnual report
「Accordingly, the company established the Digitalisation Promotion Committee as a subordinate body of the Internal Control Committee and is strengthening information security by developing regulations governing information management and ensuring that employees and others are informed of and comply with them.」
The former IT Promotion Committee is described as the Digitalisation Promotion Committee, with information security management organised around the development of regulations and communication to employees. - FY2022MitigatedAnnual report
「Accordingly, the company established the IT Promotion Committee as a subordinate body of the Internal Control Committee and is strengthening information security by developing regulations governing information management and ensuring that employees and others are informed of and comply with them.」
Although information leakage and cyberattack risks continue, specific measures are now described, including the IT Promotion Committee, information management regulations, and communication of those regulations to employees and ensuring compliance. - FY2021First statedAnnual report
「If such confidential information is lost, destroyed or leaked for any reason, the Group could suffer a decline or loss of social credibility and incur liability for damages. Cyberattacks on internal information systems using technology that exceeds the level of protection assumed by the company could also cause internal systems to stop operating.」
The company lists the loss or leakage of personal information and business partner confidential information, cyberattacks exceeding assumptions, and internal system outages as separate risks.