Risk of Business Shutdowns Due to Information System Failures or Cyberattacks
First written in FY2021. 1 of 4 entries say "Advanced", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2020: 2 of 7 companies on the "Worse" side.
10 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「Risks relating to information systems and information security: Impact II; Likelihood II」
The Company reassessed information system failure and cyberattack risks as important risks and continues to combine rules, infrastructure, training and external services across 3 areas: prevention, damage mitigation and business continuity. - FY2025AdvancedAnnual report
「After conducting risk assessments for each risk item, we prepare risk maps according to defined rules for each of the risk categories below.」
The Company prepared risk maps by category, including information systems, supply chains, human resources, interest rates, climate change and social expectations, and disclosed assessments of impact and likelihood. - FY2023Specific assessment of information system and cyber risksAnnual report
「Risks relating to information systems and information security: Impact II; Likelihood II」
The Company classified information system failure and cyberattack risks as important categories in its enterprise-wide risk assessment and described countermeasures including infrastructure design, rule-making and employee training. - FY2021First statedAnnual report
「It is impossible to completely eliminate the risk of serious failures in information system infrastructure and communications networks, or information leaks, alteration or destruction resulting from unauthorized access or computer viruses caused by cyberattacks. In such cases, the Group’s business activities could be materially affected, including through temporary suspension of operations.」
While recognizing the stable operation of information systems and information security as important priorities and continuing to enhance rules, systems and countermeasures, the Company explicitly identified serious failures and cyberattacks as new major risks.