Risks of Business Interruption and Information Leakage Caused by Internal Misconduct and Cyberattacks at External Service Providers
First written in FY2025. 1 of 2 entries say "Advanced", first in FY2026. Latest entry: FY2026.
The whole theme swung hardest in 2020: 1 of 6 companies on the "Worse" side.
0 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「In accordance with the Basic Policy on Third-Party Risk Management and other relevant policies, our group regularly confirms the risk management frameworks of third parties, including external service providers, business partners, and electronic payment service providers, both when contracts are executed and during the contract period.」
For risks related to outsourced service providers and other parties, the company specified periodic checks at the time of contract execution and during the contract term based on the Basic Rules for Third-Party Risk Management, as well as impact analysis and response when incidents occur. - FY2025First statedAnnual report
「If outsourced operations are interrupted or customer data are leaked due to misconduct by a service provider or a cyberattack on a service provider, this could affect our group's business operations, performance, and financial position through factors including liability for damages to customers and loss of customer trust.」
For the first time, disclosed the risk of business interruption and data leakage attributable to external service providers as a standalone risk item.