Information System Disruptions, Cyberattacks, and Information Leaks
First written in FY2022. 2 of 4 entries say "Mitigated", first in FY2023. Latest entry: FY2026.
4 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「To address these risks, the Group is developing and disseminating its information security policy and related regulations, centered on the Information Security Promotion Committee, and is building an organizational security framework. As technical measures, it has introduced endpoint protection software, implemented timely software updates, installed firewalls and monitored unauthorized access.」
The company's response to information system risks was expanded to include the Information Security Promotion Committee, policies and regulations, endpoint protection, firewalls and monitoring of unauthorized access. - FY2024MitigatedAnnual report
「The Group believes that security measures require ongoing attention to both systems and users (employees). Its main measures include introducing appropriate antivirus software, eliminating vulnerabilities through software updates and continuously monitoring unauthorized access, as well as providing all employees with training on the handling of confidential information and cybersecurity and strengthening its response framework for incidents.」
In addition to existing software, monitoring and incident response measures, the company explicitly described training for all employees on confidential information and cybersecurity. - FY2023MitigatedAnnual report
「As its main measures, the company is implementing security measures including the introduction of appropriate antivirus software, eliminating vulnerabilities through software updates and continuously monitoring unauthorized access, while also working to strengthen its response framework for incidents.」
The company described specific measures addressing the risks of information system failures, cyberattacks and information leaks, including security software, updates, continuous monitoring and an incident response framework. - FY2022First statedAnnual report
「Information systems and information networks are indispensable infrastructure. If the operation of these information systems were to result in system shutdowns caused by damage from a major disaster, system failures caused by computer virus infections or damage caused by hacking, or the leakage of internal information outside the company, the Group's financial condition and operating results could be affected.」
The company has identified information system outages, virus infections, hacking, unauthorized access and internal information leaks as new risks that could affect operating results and financial condition.