Risk of System and Communications Network Failures
First written in FY2019. 3 of 5 entries say "Mitigated", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2026: 16 of 83 companies on the "Worse" side.
7 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「As security measures for the service delivery system, the Company will establish robust security resilience by combining defense in depth covering the entire system with a zero-trust approach.」
As specific measures to address system and communications network failures, the Company disclosed enhanced security through a combination of defense in depth and zero trust, in addition to its ISMS activities. - FY2025MitigatedAnnual report
「The Company has obtained certification under the international information security management system (ISMS) standard ISO/IEC 27001:2022 and the Japanese standard JIS Q 27001:2023, and has taken various measures, including establishing procedures for system failures and strengthening security systems.」
As measures addressing the risk of system failures, the Company disclosed its ISMS certifications under ISO/IEC 27001:2022 and JIS Q 27001:2023 and continued to strengthen its response framework and security. - FY2023MitigatedAnnual report
「Through activities under its quality management system (ISO 9001), information security management system (ISO/IEC 27001) and ISMS cloud security system (ISO/IEC 27017), the Company will continue to provide high-quality, secure products and services.」
As measures addressing system and communications network failures, the Company disclosed management activities including ISMS cloud security under ISO/IEC 27017, in addition to its existing ISO/IEC 27001 certification and other measures. - FY2020MitigatedAnnual report
「The Company has obtained certification under the international information security management system (ISMS) standard ISO/IEC 27001:2013 and the Japanese standard JIS Q 27001:2014, and has taken various measures, including establishing procedures for system failures and strengthening security systems. However, major system or communications network failures caused by hardware or software defects, large-scale natural disasters, computer virus intrusions or other events could affect the Group’s results.」
While continuing to recognize the risk of system failures, the Company disclosed its ISO/IEC 27001:2013 and JIS Q 27001:2014 certifications, procedures for system failures and strengthened security systems. - FY2019First statedAnnual report
「The Group’s business depends heavily on computer systems and their networks. Although it has taken various measures, including establishing procedures for system failures and strengthening security systems, major system or communications network failures caused by hardware or software defects, large-scale natural disasters, computer virus intrusions or other events could affect the Group’s results.」
Risks of failures caused by dependence on systems and networks, hardware and software defects, computer viruses and other factors were disclosed separately for the first time.