Information Security Risks Arising from Cyberattacks, etc.
First written in FY2018. 4 of 6 entries say "Advanced", first in FY2023. Latest entry: FY2026.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
14 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「As part of these efforts, the Company established a basic cybersecurity policy and a cybersecurity committee chaired by the CISO (Chief Information Security Officer), creating a framework for regular reporting to and deliberation by management and clarifying the reporting line to management.」
The Company strengthened its cybersecurity response from the existing monitoring, SIRT and backup measures to a management-linked framework led by the CISO and the cybersecurity committee. It also added rules, training and controls for the use of generative AI. - FY2025AdvancedAnnual report
「To reduce the Group's key risks, under the leadership of risk owners responsible for each risk area, the Group is working to conduct cyber incident exercises, thoroughly promote fair transactions with affiliated companies, and enhance its BCP framework for natural disasters.」
For cybersecurity, the Company conducted cyber incident exercises led by risk owners, in addition to its existing monitoring, SIRT and backup measures. - FY2024AdvancedAnnual report
「To protect these assets, the Company established a basic cybersecurity policy, with its cybersecurity division taking the lead in building a security management system. It conducts activities based on this system through the operation of a cybersecurity council.」
The Company systematized its response to cyberattack risks by adding a basic policy, a specialized department, a security management system, governance bodies, and training and audits to monitoring, SIRT and backups. - FY2023AdvancedAnnual report
「Cyberattacks pose a threat to the entire supply chain and carry the risk of leading to suspension of component supplies or plant operations. The Group also faces the risk of leakage of personal information held by the Group, including its dealerships. The Group is working to raise the level of cybersecurity measures not only within the Group but also among its business partners.」
The Company expanded its cybersecurity response from its own information systems to measures covering the entire supply chain, including business partners. - FY2020MitigatedAnnual report
「The Company has established monitoring to accelerate the detection of cyberattacks and an SIRT (Security Incident Response Team) framework for security incidents. For data backups, it has established a system for distributed backups at multiple locations through its own operations at the Company's data center and in cloud environments.」
The Company established specific measures to address the risks of cyberattacks and information leaks, including monitoring, SIRT, security training, and backups across multiple sites and in the cloud. - FY2018First statedAnnual report
「Although these information technology systems, networks and systems have security measures in place, cyberattacks, unauthorized access and attacks involving computer viruses may cause interruptions to critical operations or services, corruption or loss of data, and leakage of confidential information.」
Cyberattacks, unauthorized access and virus-related business interruptions and information leaks involving information technology, networks and systems were identified as a standalone risk for the first time.