Risk of Business Disruption and Information Leakage from Cyberattacks
First written in FY2023. 1 of 2 entries say "Mitigated", first in FY2024. Latest entry: FY2024.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
47 other companies' latest entry also says "Mitigated".
- FY2024MitigatedAnnual report
「In addition to establishing regulations and rules for information security risk management, the company has introduced an EDR (Endpoint Detection and Response) system that identifies the behavior of suspicious programs and prevents them from executing. In parallel, it will regularly conduct information security training and other measures to improve employee literacy.」
Rules and procedures, an EDR system, and regular information security training have been introduced and implemented to address the risk of cyberattacks. - FY2023First statedAnnual report
「Cyberattacks could cause the Group’s services to be suspended, information to be leaked, including customer information and information related to the Group’s management and business operations, and data to be destroyed or tampered with, potentially affecting the Group’s operations, business performance and financial position.」
The company has identified as new risks the possibility of service disruptions, information leakage, and data destruction or tampering caused by malware, DDoS attacks, business email compromise and other threats.