Information Security Risk
First written in FY2021. 3 of 6 entries say "Mitigated", first in FY2022-Q2. Latest entry: FY2025-H1.
The whole theme swung hardest in 2022: 2 of 7 companies on the "Worse" side.
2 other companies' latest entry also says "Mitigated".
- FY2025-H1MitigatedAnnual report
「In September 2024, the Group entered into a strategic partnership with U.S. cybersecurity company Keyfactor, Inc. to expand its cybersecurity business. Using public key infrastructure (PKI) technology, the Group will further strengthen automotive cybersecurity and provide services globally to a range of industries requiring cybersecurity measures.」
As a measure against information security risks, the Group entered into a strategic partnership with Keyfactor, Inc. and outlined a policy to expand cybersecurity services using PKI technology for the automotive industry and other industries. - FY2024RestatedAnnual report
「Continuous communications monitoring, endpoint behavior monitoring and automatic isolation have been introduced as measures to minimize damage in the event of an attack.」
The Group continues to implement information security measures, including continuous communications monitoring, endpoint behavior monitoring and automatic isolation. - FY2023MitigatedAnnual report
「In light of recent trends in cyberattacks, the Group has introduced continuous communications monitoring, endpoint behavior monitoring and automatic isolation as measures to minimize damage in the event of an attack.」
Continuous communications monitoring, endpoint behavior monitoring and automatic isolation were introduced as information security measures. - FY2022RestatedAnnual report
「In the IT infrastructure area, including networks and email security, the Group is implementing measures to efficiently enhance effectiveness across the Group through system standardization.」
The Group continues to maintain information security regulations, education and training, responses to threat information, and standardization of the Group's IT infrastructure. - FY2022-Q2MitigatedAnnual report
「In June 2021, the Group entered into a domestic sales agency agreement with Israel-based Cybellum Technologies Ltd., which provides security services for the automotive industry, to address vulnerabilities to cyberattacks on connected vehicles. Through the sale of the company's vulnerability management solution, the Group will support measures against connected-vehicle cyber risks from the development stage through after launch.」
Specific measures against connected-vehicle cybersecurity risks were established through a domestic sales agency agreement with Cybellum Technologies Ltd. and the sale of its vulnerability management solution. - FY2021First statedAnnual report
「The Group has established group-wide regulations and guidelines concerning information security, monitors and improves the status of compliance, develops systems and provides education and training to prepare for cyberattacks and other threats, and implements prompt countermeasures based on threat information, including product vulnerability information and security incidents.」
A new risk item covering information security regulations and guidelines, education and training, countermeasures based on threat information, and standardization of IT infrastructure was described.