System failures, communications outages and improper operations
First written in FY2016. 3 of 6 entries say "Mitigated", first in FY2023. Latest entry: FY2026.
The whole theme swung hardest in 2026: 18 of 81 companies on the "Worse" side.
- FY2026MitigatedAnnual report
「The processing centers responsible for critical operations are distributed between Tokyo Ubiquitous and Kansai Ubiquitous and have disaster preparedness measures such as seismic isolation systems and emergency power supplies. In addition, we identify and control risks through the various bodies responsible for crisis management and risk management, working to improve the effectiveness of our business continuity framework.」
Measures addressing system and communications outages continue, including the east-west distribution of critical processing centers, seismic isolation, emergency power supplies, training and risk identification. - FY2027-H1WorsenedAnnual report
「In addition, incidents involving information leaks caused by cyberattacks, including unauthorized access and ransomware, have occurred in succession both in Japan and overseas, while serious software vulnerabilities continue to be identified, further increasing the threats surrounding cybersecurity.」
The external threats related to cyberattacks, information leaks and software vulnerabilities increased further. At the same time, the Company continues to strengthen its identification of information assets, vulnerability management, application of updates and access monitoring. - FY2025MitigatedAnnual report
「The processing centers responsible for critical operations, Tokyo Ubiquitous and Kansai Ubiquitous, are equipped with seismic isolation systems, and disaster preparedness measures have been implemented, including emergency power supplies for extended power outages. Going forward, we will continue to identify and control risks through the various bodies responsible for crisis management and risk management.」
As measures addressing system and communications outage risks, the disclosure specifies backup systems, BCP, training, seismic isolation at the processing centers and emergency power supplies. - FY2023MitigatedAnnual report
「As part of our response to information security incidents such as targeted phishing emails and ransomware, we have established a Cybersecurity Response Team. During normal operations, we conduct preparations and preventive measures necessary for responding when incidents occur, including developing incident response procedures and conducting regular training.」
In addition to measures addressing system and communications outage risks, a specialized team, training and an incident response framework have been established for cyberattacks and ransomware. - FY2018RestatedAnnual report
「Accordingly, if circumstances arise such as system errors caused by defects in the hardware or software of our Group or external connection partners, temporary overloads caused by increased access volume that render the systems of our Group or external connection partners inoperable, disruptions to communications networks caused by natural disasters or accidents, or unauthorized or improper operations, our Group's business may be seriously disrupted. This could consequently lead to a significant loss of confidence in our Group and adversely affect its performance and financial position.」
The risk of business interruptions caused by system errors, overloads, communications outages and improper operations continues to be disclosed. - FY2016First statedAnnual report
「If circumstances arise such as system errors caused by defects in the hardware or software of our Group or external connection partners, temporary overloads caused by increased access volume that render the systems of our Group or external connection partners inoperable, disruptions to communications networks caused by natural disasters or accidents, or unauthorized or improper operations, our Group's business may be seriously disrupted. This could consequently lead to a significant loss of confidence in our Group and adversely affect its performance and financial position.」
The disclosure covers business continuity risks involving in-house systems, external connection partners' systems, communications networks and operations.