Information system outages and damage caused by cyberattacks and other incidents
First written in FY2020. 1 of 3 entries say "Restated". Latest entry: FY2025.
The whole theme swung hardest in 2024: 13 of 85 companies on the "Worse" side.
16 other companies' latest entry also says "Advanced".
- FY2025AdvancedAnnual report
「Based on its Electronic Information Security Policy, the company is working to reduce information security risks through technical measures, employee training, regular information security audits, and vulnerability assessments by third-party organisations. It is also working to establish a cybersecurity framework for responding when incidents occur.」
In addition to the existing technical measures, employee training and regular audits, the company explicitly identifies vulnerability assessments by third-party organisations and establishing a framework for responding to incidents as countermeasures. - FY2021RestatedAnnual report
「Measures: In addition to technical measures, the company is working to strengthen information security through organisational measures such as employee training and regular information security audits.」
The company continues to disclose the risk of system outages and damage caused by cyberattacks and other incidents, explicitly identifying technical measures, employee training and regular audits as countermeasures. - FY2020First statedAnnual report
「Our Group is promoting the establishment of an appropriate information security framework and working to strengthen information security measures. However, if a cyberattack or other event causes our systems to stop, creates a security issue or results in damage, it may damage our brand image and have a material impact on our operating results and financial condition.」
As a business risk, the company has for the first time disclosed the possibility of system outages, security issues and damage caused by cyberattacks and other incidents, as well as efforts to strengthen its information security framework and measures.