Information Technology and Information Security Disruption Risk
First written in FY2016. 2 of 6 entries say "Advanced", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2025: 11 of 53 companies on the "Worse" side.
59 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「In addition, the Company has established an in-house CSIRT※1 and joined the Nippon CSIRT Association※2, and works to stay informed at all times about how to operate the in-house CSIRT, how to respond in an emergency and developments in security-related laws and regulations.」
The risk of cyberattacks and other incidents remains the highest-priority risk, and the response system through the in-house CSIRT and the Nippon CSIRT Association has been reaffirmed. - FY2025RaisedAnnual report
「(3) Risks from cyberattacks, information technology networks and system failures (previous fiscal year: highest-priority risk)」
Information technology and information security disruption risk was identified as the highest-priority risk, up from a priority risk in the previous fiscal year. Measures include external data centers, continuous monitoring, targeted email training, an in-house CSIRT and membership in the Nippon CSIRT Association. - FY2024AdvancedAnnual report
「In addition, the Company has established an in-house CSIRT※1 and joined the Nippon CSIRT Association※2, and works to stay informed at all times about how to operate the in-house CSIRT, how to respond in an emergency and developments in security-related laws and regulations.」
In addition to external data centers, continuous monitoring and targeted email training, the Group strengthened its information security response system by establishing an in-house CSIRT and joining the Nippon CSIRT Association. - FY2020AdvancedAnnual report
「We also provide employees with information security training, including training in responding to targeted emails.」
In addition to backups through external data centers, the Group provides employee training, including targeted email exercises. - FY2017MitigatedAnnual report
「To safeguard this information, we have established a backup system using external data centers located in areas with relatively few natural disasters, and have implemented appropriate security measures.」
The disclosure cites a backup system using external data centers as a measure against information technology and information security disruptions. - FY2016First statedAnnual report
「Attacks by hackers or computer viruses could result in the suspension of the Group's business activities, data loss or the leakage of information, including personal information, inside or outside the Group.」
The disclosure addresses the possibility of business interruptions, data loss, information leaks and an impact on public trust.