Cyberattack and Information Security Risks
First written in FY2023. . Latest entry: FY2025.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
0 other companies' latest entry also says "Other".
- FY2025Information security identified as a priority risk, with KPIs establishedAnnual report
「For fiscal 2025, the Group identified "fires at its own facilities," "violations of laws and regulations and compliance" and "information security" as key risks requiring Group-wide action. By promoting initiatives across the Group, it aims to ensure stable business continuity and further enhance corporate value.」
The Group identified cyberattacks and information security risks as priority risks requiring Group-wide action and outlined KPIs including 0 serious incidents and a company-wide response framework. - FY2023First statedAnnual report
「However, if an unforeseen event occurs due to increasingly sophisticated and advanced cyberattacks or other causes, the Group's operating results and financial position could be adversely affected by a decline in social credibility and liability for damages resulting from information leakage, recovery costs, and business disruptions caused by system outages that involve customers and the entire supplier base.」
Cyberattacks, information leakage and system outages were identified as standalone business risks, with threat monitoring and analysis, incident detection and response capabilities, infrastructure supporting telework and cloud use, and enhanced training cited as countermeasures.