Leakage or Tampering of Confidential and Personal Information
First written in FY2016. 4 of 8 entries say "Restated". Latest entry: FY2025.
The whole theme swung hardest in 2026: 19 of 80 companies on the "Worse" side.
23 other companies' latest entry also says "Mitigated".
- FY2025MitigatedAnnual report
「To prevent information leakage from within the Group, the Group strictly implements measures including folder-level access restrictions for confidential data, AI-based detection of suspicious data transmissions, restrictions on the use of removable media such as USB memory devices and SD cards, measures to prevent departing employees from taking confidential Group information, and information-security training for employees.」
Responses to information leakage risks have been made specific, extending to AI-based detection of suspicious data transmissions, folder-level access restrictions, restrictions on removable media and measures concerning departing employees. - FY2024RestatedAnnual report
「In addition to initiatives within the Group, the Group is supporting business partners, including suppliers, in improving their information-security management to prevent information leakage from these partners and is also taking steps to raise the level of information-security management across the entire supply chain.」
The policy of extending information-security measures to business partners such as suppliers and managing the entire supply chain has continued. - FY2023MitigatedAnnual report
「In addition to initiatives within the Group, the Group is supporting business partners, including suppliers, in improving their information-security management to prevent information leakage from these partners and is also taking steps to raise the level of information-security management across the entire supply chain.」
The scope of information-security measures has expanded from within the Group to business partners such as suppliers, indicating efforts to raise management standards across the entire supply chain. - FY2021MitigatedAnnual report
「To prepare for external cyberattacks, the Group conducts vulnerability assessments through information-security specialists and rectifies any deficiencies identified. In terms of governance, it is strengthening information-security systems throughout the Group based on the NIST (National Institute of Standards and Technology) framework.」
Responses to information leakage and alteration risks have been made specific, extending to vulnerability assessments, the NIST framework, restrictions on removable media, training, recovery systems and cyber insurance. - FY2020RestatedAnnual report
「However, external attacks, internal negligence, theft or other causes could result in the leakage, destruction or alteration of this information or the shutdown of information systems.」
The residual risks of information leakage, destruction and alteration and information-system shutdowns have continued. - FY2019RestatedAnnual report
「However, external attacks, internal negligence, theft or other causes could result in the leakage, destruction or alteration of this information or the shutdown of information systems.」
The residual risks of leakage, destruction and alteration of confidential and personal information and shutdowns of information systems have continued. - FY2018RestatedAnnual report
「The Group has established a management framework covering the entire Group and is implementing thorough controls, strengthening IT and facility security, and providing employee training and other measures to prevent this information from being leaked externally, destroyed or altered.」
The risks of leakage, destruction and alteration of confidential and personal information, together with responses through IT and facility security and employee training, have continued. - FY2016First statedAnnual report
「However, these information assets could be leaked or altered as a result of external attacks, negligence, theft or other causes.」
After implementing IT security, facility security and employee training, the Group describes the residual risks of information leakage and alteration.