Information security and cyberattack risks and countermeasures
First written in FY2024. 1 of 2 entries say "Mitigated", first in FY2025. Latest entry: FY2025.
The whole theme swung hardest in 2026: 31 of 102 companies on the "Worse" side.
31 other companies' latest entry also says "Mitigated".
- FY2025MitigatedAnnual report
「In addition, we regularly conduct vulnerability assessments, targeted-attack email training, internal education adapted to changes in the environment, and self-inspections.」
In addition to existing measures such as patches, firewalls, EDR, access-rights management and encryption, the company regularly conducts vulnerability assessments, targeted-attack email training, internal education and self-inspections. - FY2024First statedAnnual report
「Information security risks in our business activities include unauthorized access to systems; external leakage of confidential and personal information due to employee operating errors; damage to systems and data, and encryption for ransom, resulting from cyberattacks exploiting vulnerabilities in the supply chain; malware infiltration; and unauthorized entry into or theft from offices and data centers. In response to these risks, we have established Information Security Management Regulations and implemented regular software vulnerability patching, highly reliable firewalls, antivirus software with EDR functionality and a monitoring system, appropriate access-rights assignment and management, encryption of data on PCs and communications, a ban on the use of USB memory devices, and redundancy for server data as measures against unauthorized access and information leaks.」
For the first time, information security risks including unauthorized access, information leaks, cyberattacks, malware and unauthorized entry are described separately, together with measures including regulations, patches, firewalls, EDR, access-rights management, encryption and data redundancy.