Information System Failures and Information Leaks
First written in FY2016. 2 of 6 entries say "Mitigated", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2026: 31 of 106 companies on the "Worse" side.
15 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「To prevent negligence leading to information leakage or unauthorized use, the Group is working to improve management security by thoroughly enforcing its information management rules, including training for directors and employees on the importance of information security, targeted attack email drills, and restrictions on methods of removing information from the company.」
In addition to the existing defense in depth, CSIRT, and BCP drills, the Group added thorough enforcement of management rules, including restrictions on methods of removing information from the company. - FY2025MitigatedAnnual report
「The Group implements various hardware- and software-based information security measures against cyberattacks, including defense in depth, the establishment of CSIRT as an early detection and response structure, and BCP drills based on emergency scenarios.」
BCP drills based on emergency scenarios were added to the response to information system failures and information leakage. - FY2023AdvancedAnnual report
「To prevent negligence leading to information leakage or unauthorized use, the Group is increasing the frequency of training for directors and employees on the importance of information security and targeted email attack drills to raise awareness.」
In addition to defense in depth and CSIRT, the Group described measures to increase the frequency of information security training and targeted email attack drills. - FY2022MitigatedAnnual report
「The Group implements various hardware- and software-based information security measures against cyberterrorism, including defense in depth and the establishment of CSIRT, an early detection and response structure. To prevent negligence leading to information leakage or unauthorized use, it also conducts annual training for directors and employees on the importance of information security and targeted email attack drills to raise awareness.」
As measures against information system failures and information leakage risks, the Group identified defense in depth, CSIRT, and annual training and targeted email attack drills. - FY2019WorsenedAnnual report
「Information systems play an extremely important role in every aspect of the Group’s business activities. They are becoming increasingly complex and sophisticated and are also exposed to human-related risks such as cyberterrorism.」
The information systems risk disclosure was expanded to specifically address increasing system complexity and sophistication and exposure to cyberterrorism. - FY2016First statedAnnual report
「If an information system failure occurs, it could affect the Group’s business performance. The Group has implemented various information security measures to prevent the leakage or unauthorized use of technical information, customer information, transaction information, personal information, and other data. However, if information leakage or unauthorized use occurs, the response could affect the Group’s business performance.」
The Group identifies system failures and information leakage or unauthorized use resulting from natural disasters, fires, and cyberterrorism.