Administrative Error and System Failure Risk
First written in FY2016. 6 of 12 entries say "Restated". Latest entry: FY2026.
Resona Holdings moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2026: 4 of 11 companies on the "Worse" side.
1 other company's latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「Suspension of the Company's services and leakage of customer information due to cyberattacks and other incidents affecting critical infrastructure, including third parties」
System failure risk is specified as a top risk involving not only the suspension of critical operations but also attacks on critical infrastructure, including third parties, and information leakage. - FY2021Designation of major system incidents as a top riskAnnual report
「⑥ Business suspension and other consequences arising from major system-related incidents — risks affecting overall business strategy」
It explicitly identifies system failures, unauthorised use and cyberattacks as top risks affecting overall business strategy. - FY2020WorsenedAnnual report
「The Company positions responding to cyberattacks as one of management's highest-priority issues and is promoting countermeasures against cyberattacks through discussions and verification by the Management Committee, the Board of Directors and other bodies. It has established a dedicated department, Resona-CSIRT, to conduct activities during normal and emergency situations in preparation for cyberattacks,」
It specifies the possibility that cyberattacks may become more sophisticated and increase in number as part of system failure risk, and details a response framework including Resona-CSIRT, exercises and training, and one-time passwords. - FY2020-Q3MitigatedAnnual report
「The system integration at Kansai Mirai Bank, a consolidated subsidiary of the Company, was completed as scheduled in October 2019 and has been operating stably without any major system failures.」
It states that Kansai Mirai Bank's system integration was completed as scheduled in October 2019 and that the system has been operating stably without any major system failures. - FY2019Explicit identification of cyberattack and integration risksAnnual report
「Recognising that risks arising from system failures or deficiencies and misconduct, including those caused by cyberattacks, could potentially undermine the Group's management foundation, the Group establishes standards for managing risks such as preventing system failures, deficiencies and misconduct, develops an appropriate management framework, and works to reduce system risks by preparing contingency plans for system failures.」
It explicitly identifies the existing operational and system failure risks as including cyberattacks, and describes the planned system integration of Kansai Mirai Bank. - FY2019-Q3RestatedAnnual report
「During the cumulative third-quarter consolidated period, there were no material changes in matters described in this quarterly report concerning the status of the business, financial information and other matters that could materially affect investors' decisions, or in the business and other risks described in the annual securities report for the previous fiscal year.」
It states that there have been no material changes in the risks related to operational errors and system failures. - FY2018RestatedAnnual report
「To prevent these operational risks, we are promoting reviews of procedures relating to business processes and administrative processing, centralised processing and system implementation, while continuing education and training.」
As measures against operational errors and internal misconduct, it continues to review procedures, centralise processing, implement systems, and provide education and training. - FY2018-Q1RestatedAnnual report
「During the first quarter of the current consolidated cumulative period, there were no occurrences of matters that could materially affect investors’ investment decisions among the matters relating to the business and financial position described in this quarterly report, nor were there any material changes to the “Business and Other Risks” described in the annual securities report for the previous fiscal year.」
It states that there have been no material changes in the risks related to operational errors and system failures. - FY2017-Q3RestatedAnnual report
「During the cumulative third-quarter consolidated period, there were no material changes in matters described in this quarterly report concerning the status of the business, financial information and other matters that could materially affect investors' decisions, or in the business and other risks described in the annual securities report for the previous fiscal year.」
It states that there have been no material changes in the risks related to operational errors and system failures. - FY2017-Q2RestatedAnnual report
「During the cumulative second-quarter period, there were no significant changes in matters relating to the business and accounting conditions described in this quarterly report that could materially affect investors' decisions, nor in the "Business and Other Risks" described in the securities report for the previous fiscal year.」
It states that there have been no material changes in the risks related to operational errors and system failures. - FY2017-Q1RestatedAnnual report
「During the first quarter of the current consolidated cumulative period, there were no occurrences of matters that could materially affect investors’ investment decisions among the matters relating to the business and financial position described in this quarterly report, nor were there any material changes to the “Business and Other Risks” described in the annual securities report for the previous fiscal year.」
It states that there have been no material changes in the risks related to operational errors and system failures. - FY2016First statedAnnual report
「The Group regularly monitors the occurrence of operational errors and internal misconduct and comprehensively analyses the location, causes and characteristics of operational risks, using the results to formulate measures to prevent recurrence and reduce risk.」
It states that risk will be reduced through reviews of business processes, centralised processing, system implementation, education and training, and contingency plans.