Risk of failures in critical systems and services
First written in FY2016. 2 of 6 entries say "Worsened", first in FY2017. Latest entry: FY2021.
The whole theme swung hardest in 2026: 18 of 89 companies on the "Worse" side.
- FY2021MitigatedAnnual report
「When a system disruption occurs, the Group also seeks to respond promptly and prevent risks from materialising by disseminating information to relevant internal departments through its incident-management system.」
The measures described include quality-assurance reviews, inspections before and after launch, a downtime quality target and internal information dissemination through the incident-management system. - FY2020MitigatedAnnual report
「Accordingly, the Group has set a quality target for unplanned service downtime caused by system disruptions and is working to improve quality attributes such as confidentiality, fault tolerance, recoverability and stability through quality-assurance reviews during system development and system inspections before and after launch.」
Measures addressing the risk of major disruptions to critical systems include a quality target for unplanned downtime, quality-assurance reviews and inspections before and after launch. - FY2019WorsenedAnnual report
「The systems and services provided by the Group range from core systems used in customers’ operations and systems supporting social infrastructure such as financial services and electricity, to consumer-facing services such as payment services and e-commerce (Electronic Commerce). If a major disruption occurs in these systems or services due to system failures, cyberattacks or other causes, its impact could extend beyond the Group’s customers to a broad range of consumers using the services. This could affect the Group’s business performance through reputational risks, including a decline in its social credibility and brand image, as well as payment of compensation for resulting damages and other factors.」
The scope of system-disruption risk has been expanded to consumer-facing services such as payment services and e-commerce, with the potentially affected area explicitly described as broader. - FY2018RestatedAnnual report
「If a major disruption occurs in these systems or services due to system failures, cyberattacks or other causes, the Group’s business performance could be affected by a decline in its social credibility and brand image, payment of compensation for resulting damages and other factors.」
System failures and cyberattacks continue to be identified as causes of disruptions to critical systems and services. - FY2017WorsenedAnnual report
「Some of the systems and services provided by the Group are essential to customers’ operations or form part of social infrastructure. If a major disruption occurs in these systems or services due to system failures, cyberattacks or other causes, the Group’s business performance could be affected by a decline in its social credibility and brand image, payment of compensation for resulting damages and other factors.」
Cyberattacks have been explicitly identified, alongside conventional system failures and operational errors, as a cause of major disruptions. - FY2016First statedAnnual report
「Some of the systems and various services provided by our group are connected to customers' mission-critical systems and social infrastructure. If a serious failure occurs in these systems or services due to system defects, operational errors, or other causes, our group's operating results may be affected by a decline in its social credibility and brand image, payment of compensation for resulting damages, and other factors.」
The risk that system failures or operational errors involving critical business and social infrastructure systems could affect trust, liability exposure and business performance.