ISO 27001 certification across all sites and development of measurement and testing infrastructure
First written in FY2017-Q1. 6 of 11 entries say "Restated". Latest entry: FY2025.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2025AdvancedAnnual report
「The Group is implementing measures based on the NIST (National Institute of Standards and Technology) Cybersecurity Framework after establishing the Yokowo Group Information Security Policy to prevent the inappropriate disclosure, leakage, destruction, alteration and use for unauthorised purposes of information assets and to protect them appropriately.」
In addition to operating an information security committee and CSIRT based on ISO 27001, the company has specified the NIST Framework, phishing exercises, training 4 times a year and preparations for OT security measures. It disclosed 0 high-severity internal security incidents. - FY2024RestatedAnnual report
「The company recognises information security management as one of its top management priorities. To manage it appropriately, the company and its major production sites have obtained ISO 27001 certification, and the Group is promoting information security activities, including the establishment and operation of an information security management system (ISMS) and regular and ad hoc information security training.」
The Group continues its information security activities, including ISO 27001, the ISMS and training. - FY2023AdvancedAnnual report
「The company recognises information security management as one of its top management priorities. To manage it appropriately, the company and its major production sites have obtained ISO 27001 certification, and the Group is promoting information security activities, including the establishment and operation of an information security management system (ISMS) and regular and ad hoc information security training.」
The company operates ISO 27001 across the company and its major production sites and has expanded the initiative to include the ISMS, training and Group-wide activities. - FY2021Reiteration and operational elaborationAnnual report
「The Group has established the Yokowo Group Information Security Policy to prevent the inappropriate disclosure, leakage, destruction, alteration and unauthorised use of information assets and to protect them appropriately. Based on the NIST (National Institute of Standards and Technology) Cybersecurity Framework, the Group is implementing measures to ensure and improve the protection and appropriate management of information assets, while continuing to provide information security training for officers and employees and conducting regular internal and external audits.」
The ISO 27001-related initiatives, which had not been described as specific measures in FY2018, are again described in concrete terms as an information security structure, training and regular audits. - FY2018DroppedAnnual reportThe management policy and issues to be addressed for the fiscal year do not mention specific initiatives such as obtaining ISO 27001 certification at all sites or developing measurement and testing capabilities.
- FY2018-Q3RestatedAnnual report
「・Following ISO 27001 certification in Japan under the international information security standard, obtain certification at all sites ・Develop measurement and testing capabilities that can provide solutions to advanced-technology customers and build up the talent base」
The company has reiterated its policy of obtaining ISO 27001 certification at all sites and developing measurement and testing capabilities and human resources. - FY2018-Q2RestatedAnnual report
「・Following ISO 27001 certification in Japan under the international information security standard, obtain certification at all sites ・Develop measurement and testing capabilities that can provide solutions to advanced-technology customers and build up the talent base」
The company has reiterated its policy of obtaining ISO 27001 certification at all sites and developing measurement and testing capabilities and human resources. - FY2018-Q1RestatedAnnual report
「・Following ISO 27001 certification in Japan under the international information security standard, obtain certification at all sites ・Develop measurement and testing capabilities that can provide solutions to advanced-technology customers and build up the talent base」
The company has reiterated its policy of obtaining ISO 27001 certification at all sites and developing measurement and testing capabilities and human resources. - FY2017-Q3RestatedAnnual report
「Following ISO 27001 certification in Japan under the international information security standard, the company aims to obtain certification at all sites, develop measurement and testing capabilities that can provide solutions to advanced-technology customers, and build up its talent base.」
The company has reiterated its policy of obtaining ISO 27001 certification at all sites and developing measurement and testing capabilities and human resources. - FY2017-Q2RestatedAnnual report
「Following ISO 27001 certification in Japan under the international information security standard, the company aims to obtain certification at all sites, develop measurement and testing capabilities that can provide solutions to advanced-technology customers, and build up its talent base.」
The company has reiterated ISO 27001 certification at all sites and the development of measurement and testing capabilities and human resources as governance initiatives. - FY2017-Q1First statedAnnual report
「Following ISO 27001 certification in Japan under the international information security standard, the company aims to obtain certification at all sites, develop measurement and testing capabilities that can provide solutions to advanced-technology customers, and build up its talent base.」
The company has identified information security certification, technology infrastructure and talent development as priorities for becoming a partner to advanced-technology customers.