Organization-Wide Strengthening of Information Security
First written in FY2016. 10 of 11 entries say "Advanced", first in FY2017. Latest entry: FY2026.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「To reduce risks associated with aging IT infrastructure and applications, our group is promoting systematic lifecycle management, including prioritizing system upgrades, renewals and migrations, in order to ensure operational stability and security.」
Information security initiatives were expanded beyond cyber monitoring to include lifecycle management of aging IT, centralized management of non-standard IT, and recovery plans and BCP. - FY2025AdvancedAnnual report
「To promote the use of generative AI, we began building and using a generative AI environment for internal use, created internal guidelines and a playbook of use cases, and further strengthened our AI governance initiatives.」
For information security and privacy, a generative AI environment, internal guidelines and a usage playbook were established, strengthening AI governance. - FY2024AdvancedAnnual report
「Specifically, we established a global incident response team and processes for cyberattacks, conducted tabletop exercises and improved information asset management processes in product development and manufacturing environments.」
A cyberattack response team, response processes, tabletop exercises and information asset management for product development and manufacturing environments were implemented. AI governance was also launched through guidelines for the use of generative AI. - FY2023AdvancedAnnual report
「Specifically, we launched a global product security organization and a global privacy protection organization, established a global response framework for cyberattacks, globally standardized information asset management processes in product development and manufacturing environments, and globally standardized product development processes and processes for responding to customer inquiries.」
Under the information security and privacy strategy roadmap, work began on product security and privacy protection organizations, a global response framework, and standardization of development and manufacturing environments. - FY2022AdvancedAnnual report
「The strategy includes establishing a new governance model, enabling risk management for information and cybersecurity and privacy across the company. It also aims to implement a multi-year strategic roadmap consistently worldwide.」
The information security framework was made more specific through operations based on a new governance model and a multi-year global strategic roadmap. - FY2021AdvancedAnnual report
「Our information security framework is structured around 3 information security functional areas: IT security, data protection and product security. In addition to initiatives in each area, we have established a security governance framework to implement and manage measures involving coordination across businesses, functions and regions.」
Information security was organized into 3 areas—IT, data protection and product security—and expanded to product security management, compliance with laws in each country, and regular assessments and training. - FY2020AdvancedAnnual report
「We newly established the Chief Information Security Officer, the executive responsible for information security, and launched the Information Security Global Project, strengthening the group-wide information security framework.」
Information security enhancements led by the CISO and the global project continued and were expanded to governance, training and assessments across 3 areas. - FY2019AdvancedAnnual report
「We newly established the Chief Information Security Officer, the executive responsible for information security, and launched the Information Security Global Project, strengthening the group-wide information security framework.」
The information security framework was strengthened across the company through the establishment of the CISO and launch of the global project. - FY2018AdvancedAnnual report
「Specifically, as a physical measure, we classify the premises into zones according to security management levels and restrict and manage entry and exit using ID cards, biometric authentication devices and other measures. As technical measures, we implement various defenses against risks such as external attacks using network communications, virus infections of PCs and other IT equipment, and information leakage. For attacks on websites, we take countermeasures after conducting vulnerability assessments by external specialists.」
The disclosure provides greater detail on information security measures, including physical, technical and personnel measures and vulnerability assessments. - FY2017AdvancedAnnual report
「To ensure information security, we established the Information Security Promotion Committee and are working to improve information security levels in an organizational and comprehensive manner, including at group companies.」
Physical, technical and personnel measures, vulnerability assessments, e-learning, targeted phishing email exercises and an information security month held every February are being implemented. - FY2016First statedAnnual report
「To ensure information security, we established the Information Security Promotion Committee and are working to improve information security levels in an organizational and comprehensive manner, including at group companies.」
Physical, technical and personnel measures, vulnerability assessments, training and an information security month held every February are being implemented.