Response to System Failures, Cyberattacks and Disasters
First written in FY2017-Q1. 4 of 8 entries say "Advanced", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2020: 22 of 49 companies on the "Worse" side.
6 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「Our Group has also established a Cybersecurity Management Declaration and Security Risk Management Regulations, and is responding under management leadership to the continually evolving threat of cyberattacks. Specifically, we have introduced and operate the latest services and products for countering cyberattacks, while FG-CSIRT (Computer Security Incident Response Team) and FG-SOC (Security Operations Center), established within our Group, collect and disseminate daily cyber threat information and investigate and respond when cyberattacks are detected.」
In addition to the existing Cyber Defense Center and other measures, FG-CSIRT and FG-SOC were explicitly identified, and the framework for organizationally collecting and disseminating threat information and investigating and responding after detection was stated. - FY2024AdvancedAnnual report
「Our Group has established a Cybersecurity Management Declaration and is responding under management leadership to the continually evolving threat of cyberattacks. Specifically, we have introduced and operate the latest services and products for countering cyberattacks, while the Cyber Defense Center established within our Group collects and disseminates daily cyber threat information and investigates and responds when cyberattacks are detected. For the supply chain, we also assess the security frameworks of contractors and outsourced service providers. If they fail to meet the standards, we request improvements or change the outsourced service provider, thereby working to raise the security level across our Group.」
In addition to the Cybersecurity Management Declaration, the introduction of countermeasure services and operation of the Cyber Defense Center, the scope of measures was expanded to include assessments of the security frameworks of outsourced service providers. - FY2023AdvancedAnnual report
「We have also established a Cyber Defense Center at our company to respond to cyberattacks and other incidents.」
In addition to the existing security regulations, redundancy, training and backup center, the establishment of a Cyber Defense Center as a specialized organization for responding to cyberattacks was stated. - FY2020AdvancedAnnual report
「We established CFG-CSIRT at our company to coordinate with the CSIRTs established by Group companies in response to cyberattacks and other incidents, and established a backup center for the online systems in preparation for disasters such as major earthquakes.」
In addition to the existing redundancy, training and backup center, the establishment of CFG-CSIRT to oversee and coordinate the Group's CSIRTs was specified. - FY2018RestatedAnnual report
「To properly protect the information we hold and our computer systems, we have established a Security Policy, Security Standards and System Risk Management Regulations, and put in place a framework for managing system risk. For our online systems, we have implemented redundancy for computer equipment and lines and conducted crisis management training in preparation for possible system failures, and are working to enable rapid recovery. We have also established a backup center for the online systems in preparation for disasters such as major earthquakes.」
Reiterated the response to system failures and disasters through regulations, redundancy, training and a backup center. - FY2017-Q3RestatedAnnual report
「To properly protect the information we hold and our computer systems, we have established a Security Policy, Security Standards and System Risk Management Regulations, and put in place a framework for managing system risk. For our online systems, we have implemented redundancy for computer equipment and lines and conducted crisis management training in preparation for possible system failures, and are working to enable rapid recovery. We have also established a backup center for the online systems in preparation for disasters such as major earthquakes.」
Reiterated the response through regulations, redundancy of equipment and lines, training and a backup center, as well as the possibility that measures may fail to function due to hacking, viruses and other incidents. - FY2017-Q2RestatedAnnual report
「To properly protect the information we hold and our computer systems, we have established a Security Policy, Security Standards and System Risk Management Regulations, and put in place a framework for managing system risk. For our online systems, we have implemented redundancy for computer equipment and lines and conducted crisis management training in preparation for possible system failures, and are working to enable rapid recovery.」
Reiterated the response to system failures, cyberattacks and disasters through regulations, redundancy, training and a backup center, among other measures. - FY2017-Q1First statedAnnual report
「For our online systems, we have implemented redundancy for computer equipment and lines and conducted crisis management training in preparation for possible system failures, and are working to enable rapid recovery. We have also established a backup center for the online systems in preparation for disasters such as major earthquakes.」
The response to system risk, including redundancy, training and a backup center, was stated.