Operational risk from administrative incidents, cyberattacks and staff shortages
First written in FY2021-Q3. 2 of 4 entries say "Restated". Latest entry: FY2024.
The whole theme swung hardest in 2024: 4 of 13 companies on the "Worse" side.
1 other company's latest entry also says "Mitigated".
- FY2024MitigatedAnnual report
「In addition, the Group centralised the planning, operation and management functions for its core systems and network in the newly reorganised Systems Planning Section, formerly the Systems Management Section, strengthening the organisational framework. It also established a new Security Management Section to enhance IT governance, including strengthening its cybersecurity response to increasingly sophisticated cyberattacks.」
In response to cyberattack and system failure risks, the Group centralised its systems management functions and established a Security Management Section. - FY2022RestatedAnnual report
「In response to these risks, the Group is implementing operational measures under its system risk management rules, including ensuring stable system operation and comprehensive security measures, as well as strict information management.」
The Group continues to address operational risks, including system failures, cyberattacks, unauthorised access and information leaks, through rules, security measures and information management. - FY2021RestatedAnnual report
「If a major system failure occurs, such as a computer system outage or malfunction, an external cyberattack, other unauthorised access or a computer virus infection, the Group may experience business interruptions, information leaks and related liability for damages.」
The Group continues to disclose operational risks, including system failures, cyberattacks, administrative incidents and staff shortages, and describes measures involving rules, audits and operations. - FY2021-Q3First statedAnnual report
「The Group works to maintain stable system operations in accordance with its system risk management rules. However, external cyberattacks, other unauthorised access and computer virus infections could result in information leaks, system outages or malfunctions, leading to business interruptions and liability for damages and potentially adversely affecting the Group’s results and share price.」
The disclosure describes business continuity risks, including administrative, systems, personnel, tangible asset and reputational risks.