Management by the Information Security Committee, CSIRT, and SOC
First written in FY2020. 2 of 5 entries say "Advanced", first in FY2022. Latest entry: FY2025.
The whole theme swung hardest in 2021: 2 of 13 companies on the "Worse" side.
17 other companies' latest entry also says "Advanced".
- FY2025AdvancedAnnual report
「Information security measures included enhanced email security and employee training and education.」
In addition to the framework involving the CISO, Information Security Committee, CSIRT and SOC, the company enhanced email security and conducted employee training and education. - FY2024-Q3RestatedAnnual report
「No new business or other risks arose during the cumulative third quarter of the current consolidated fiscal year. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The company has disclosed that there have been no material changes in information security risks related to management by the Information Security Committee, CSIRT and SOC. - FY2023RestatedAnnual report
「For highly confidential information, including information relating to patients' privacy, we obtained the PrivacyMark certification in December 2021 and have established a system for implementing more appropriate protection measures than before.」
The information management framework involving the Information Security Committee, CSIRT, SOC and PrivacyMark certification has been reconfirmed. - FY2022AdvancedAnnual report
「For highly confidential information, including information relating to patients' privacy, we obtained the PrivacyMark certification in December 2021 and have established a system for implementing more appropriate protection measures than before.」
Management by the Information Security Committee, in-house CSIRT and external SOC continued, and the company obtained PrivacyMark certification in December 2021. - FY2020First statedAnnual report
「The Board of Directors has appointed a Chief Information Security Officer (CISO) to oversee the maintenance of information security controls. The Information Security Committee, chaired by the CISO, comprises the information security officers of each division and holds meetings regularly. We manage information security across the company in cooperation with the in-house CSIRT (Computer Security Incident Response Team), which develops and implements measures in the event of an incident, and the external specialist organization SOC (Security Operation Center).」
The company described for the first time in specific terms its company-wide information security management framework involving the CISO, Information Security Committee, in-house CSIRT and external SOC.