Business interruption caused by natural disasters, cyberattacks, or system failures
First written in FY2018. 2 of 6 entries say "Mitigated", first in FY2021-Q3. Latest entry: FY2026.
The whole theme swung hardest in 2020: 22 of 50 companies on the "Worse" side.
6 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「The scope of information management has now expanded beyond the closed environments of the past to include external environments such as SaaS applications and internet-based services. We recognize that comprehensive measures covering not only our own security framework but also external service providers are necessary.」
The response to cyber risk was expanded to include measures covering SaaS and external service providers, as well as methods for maintaining business operations and strengthening resilience when systems are unavailable. - FY2025AdvancedAnnual report
「Based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework and our basic information security policy, we are implementing the necessary safeguards at each of the five levels of Identify, Protect, Detect, Respond and Recover, while also pursuing initiatives under a roadmap for responding to breaches.」
The response to cyber risk was made more concrete through a defense and recovery framework based on the 5 functions of the NIST Framework and a roadmap. - FY2021MitigatedAnnual report
「From an information security perspective, we will review our security policy as necessary and operate our systems rigorously in accordance with it.」
In response to cyberattacks, system failures and the risk of information leaks associated with the expansion of remote work, the company explicitly stated that it would review its security policy and operate its systems rigorously. - FY2021-Q3MitigatedAnnual report
「At the same time, the continued and expanded use of remote work is expected to increase the risk of information leaks and other risks on the network. Accordingly, we will establish a comprehensive environment by strictly enforcing rules for using digital tools outside the company and strengthening security. Within the company, we will also conduct regular training and awareness-raising activities to strengthen information security.」
In response to the risk of information leaks associated with the expansion of remote work, the company is enforcing rules for using external tools, strengthening security, and conducting regular training and awareness-raising activities. - FY2021-Q1WorsenedAnnual report
「At the same time, the continued and expanded use of remote work is expected to increase the risk of information leaks and other risks on the network. Accordingly, we will establish a comprehensive environment by strictly enforcing rules for using digital tools outside the company and strengthening security.」
The potential for information security risks, including information leaks, to increase with the continued and expanded use of remote work is explicitly stated. - FY2018First statedAnnual report
「The center has implemented safety measures including earthquake-resistant design capable of withstanding seismic intensity 7, redundant power supplies and communications lines, an in-house power generator, and measures to prevent unauthorized access caused by cyberattacks and other threats. However, if communications lines were cut or systems stopped due to natural disasters exceeding expectations, cyberattacks, system failures or other events, our Group's business activities could be significantly disrupted.」
While measures such as earthquake-resistant design capable of withstanding seismic intensity 7 are described, business interruption caused by natural disasters exceeding expectations, cyberattacks and system failures is explicitly identified as a risk.