Maintaining and Strengthening the Personal Information Protection and Information Security Certification Framework
First written in FY2017. 3 of 5 entries say "Advanced", first in FY2019. Latest entry: FY2024.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2024AdvancedAnnual report
「During the fiscal year, to further strengthen personal information protection, we revised various information security regulations, including those covering personal information, implemented new initiatives and issued communications to raise awareness of the handling of personal information. In addition, we obtained ISO/IEC 27001 certification under the new ISO/IEC 27001:2022 standard.」
The Company revised its information protection regulations, issued awareness communications and implemented new initiatives, in addition to obtaining ISO/IEC 27001:2022 certification. - FY2023AdvancedAnnual report
「To prevent cyberattacks and other incidents and respond promptly when they occur, our Group has established an information risk management organization under the CIO (Chief Information Officer), as well as a specialized Computer Security Incident Response Team (CSIRT).」
The Company established an information risk management organization and CSIRT, specifying measures to prevent cyberattacks and respond when they occur. - FY2019AdvancedAnnual report
「In addition, our operating subsidiaries undergo reviews by external certification bodies for certifications including ISO/IEC 27001:2013 / JIS Q 27001:2014 and the PrivacyMark (JIS Q 15001:2017), and verify their effectiveness from an objective standpoint by maintaining and renewing these certifications.」
The Company expressly stated that it maintains and renews its ISO/IEC 27001:2013, JIS Q 27001:2014 and PrivacyMark JIS Q 15001:2017 certifications for information security and personal information protection. - FY2018RestatedAnnual report
「As a specific information protection initiative, we appointed a CISO (Chief Information Security Officer) and CPO (Chief Privacy Officer). Under their direction, we established and maintain an information protection management framework, and conduct internal audits of information management to verify that the framework is being operated appropriately and is effective.」
The Company continues to conduct verification through the CISO and CPO, its information protection management framework and internal audits. - FY2017First statedAnnual report
「As a specific information protection initiative, we appointed a CISO (Chief Information Security Officer) and CPO (Chief Privacy Officer). Under their direction, we established and maintain an information protection management framework, and conduct internal audits of information management to verify that the framework is being operated appropriately and is effective.」
The Company lists the appointment of the CISO and CPO, its information protection management framework, internal audits and verification through external certifications such as ISO 27001 and the PrivacyMark as its initiatives.