Risks of Cyberattacks, Information Leakage, and System Failures
First written in FY2017. 3 of 5 entries say "Worsened", first in FY2021-Q2. Latest entry: FY2026.
Kyb moved to the "Worse" side of this theme in 2020, 6 years before the typical company in this theme (2026).
The whole theme swung hardest in 2026: 31 of 106 companies on the "Worse" side.
35 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The group will strengthen its overall cyber defenses and reduce the risk of operational shutdowns caused by cyberattacks by implementing group-wide cybersecurity education and training, strengthening supply-chain security, preparing a cyber-incident response manual, and establishing common guidelines for security levels.」
While maintaining its recognition of the risk posed by the sharp increase and increasing sophistication of cyberattacks, the company has specified mitigation measures involving education and training, supply-chain measures, response manuals and common guidelines as priority risk activities. - FY2022WorsenedAnnual report
「In addition to the evolution and increasing complexity of the information systems environment in recent years, employees have more opportunities to access systems externally as remote work becomes widespread, while cyberattacks have increased sharply and become more complex and sophisticated, increasing information security risks.」
In addition to increased external access through remote work, the company cites the sharp increase, growing complexity and increasing sophistication of cyberattacks, expressing the rise in information security risks more strongly than before. - FY2021WorsenedAnnual report
「In addition to the evolution and increasing complexity of the information systems environment in recent years, employees have more opportunities to access systems externally as remote work becomes the norm, while cyberattacks are becoming more complex and diverse, increasing information security risks.」
In addition to increased external access through remote work, the company cites the increasing complexity of information systems and the growing complexity and diversity of cyberattacks, explicitly stating that information security risks are rising. - FY2021-Q2WorsenedAnnual report
「The group has established an Information Security Basic Policy to protect information assets, appointed an Information Security Manager, and conducts regular education and training for all directors, officers and employees. It also evaluates and reviews its management framework and works toward continuous improvement. However, as remote work becomes the norm and employees have more opportunities to access systems externally, information leaks and system failures caused by cyberattacks or other factors could affect the group's operating results and financial condition.」
In addition to the existing risks of cyberattacks, information leaks and system failures, the increased opportunities for external access resulting from the normalization of remote work have been added as a new exposure factor. The company also describes the appointment of an Information Security Manager, education and training, and the evaluation and review of its management framework. - FY2017First statedAnnual report
「Based on its Information Security Basic Policy, the group has established a framework to protect information assets and is taking measures against risks including information leaks caused by cyberattacks and system failures.」
Cyberattacks, information leaks and system failures are listed for the first time as separate risks subject to measures under the Information Security Basic Policy.