Risks of operational and system disruptions, cyberattacks, and other incidents
First written in FY2016. 17 of 24 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 4 of 11 companies on the "Worse" side.
3 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「During the fiscal year, the Bank conducted system-failure response drills across all group companies based on the assumption of damage caused by a ransomware attack. The drills confirmed response processes and other procedures to be followed when a critical system affecting business continuity experiences a failure.」
The Bank conducted group-wide drills assuming a ransomware attack and made its response more specific through response processes for critical system failures and blind exercises. - FY2025-H1RestatedAnnual report
「No new business or other risks arose during the interim consolidated accounting period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2024-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2024-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2023MitigatedAnnual report
「During the fiscal year, the Bank conducted an all-bank exercise assuming system failures caused by cyberattacks, addressed the issues identified, and advanced its crisis-management framework by revising its Crisis Management Plan to strengthen its response to various system failures, infectious diseases and other events.」
The Bank made its response to system failures, cyberattacks and other events more specific through an all-bank exercise assuming a cyberattack and a revision of its Crisis Management Plan. - FY2022MitigatedAnnual report
「During the fiscal year, the Bank participated in a cross-industry cybersecurity exercise organized by the Financial Services Agency and strengthened its crisis-management framework by revising its Cybersecurity Management Manual based on the issues identified.」
The Bank made its cyber-risk response more specific by participating in a cross-industry exercise and revising its management manual based on the issues identified. - FY2022-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank continues to disclose that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2021MitigatedAnnual report
「In response to cyberattacks, the Bank continues to strengthen its management framework through necessary measures, information sharing with external organizations, and cyberattack-related drills and exercises.」
The Bank continued to strengthen its response to system and cyber risk through information sharing with external organizations, drills and exercises, and security measures. - FY2021-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2021-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2020MitigatedAnnual report
「The Bank's Gunma Bank CSIRT, established within the Risk Management Division, plays a central role in responding to cyberattacks. In addition to taking necessary measures, it gathers information and conducts cybersecurity training and cyberattack-related drills and exercises, thereby continuously strengthening its management framework.」
In addition to its CSIRT, training, drills and exercises, the Bank established a System Risk Management Office within the Risk Management Division in February 2020, strengthening its response to system and cyber risk. - FY2020-Q2RestatedAnnual report
「There were no newly arising business or other risks during the second quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2019-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2019-Q2RestatedAnnual report
「There were no newly arising business or other risks during the second quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2019-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2018MitigatedAnnual report
「The Bank has formulated a Crisis Management Plan for unforeseen events such as large-scale disasters and major system failures, and conducts regular drills.」
The Bank explicitly identified a Crisis Management Plan for major system failures and other events, together with regular drills, as measures to address system and operational risk. - FY2018-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2018-Q2RestatedAnnual report
「There were no newly arising business or other risks during the second quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2018-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2017RestatedAnnual report
「If computer systems are shut down or malfunction due to failures of computer equipment or communications networks, program defects or other causes, or if information is destroyed or leaked as a result of unauthorized use of computers or external attacks, the Bank's performance and financial condition could be adversely affected by the suspension of settlement functions and services, damage to its social credibility and other consequences.」
The Bank continues to specifically identify operational and system failures, external attacks and information leaks as risks. - FY2017-Q3RestatedAnnual report
「There were no newly arising business or other risks during the third quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2017-Q2RestatedAnnual report
「There were no newly arising business or other risks during the second quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2017-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. In addition, there were no material changes to the business or other risks described in the securities report for the previous fiscal year.」
The Bank has comprehensively disclosed that there have been no new developments or material changes in risks related to operational and system failures, cyberattacks and other matters. - FY2016First statedAnnual report
「If computer systems are shut down or malfunction due to failures of computer equipment or communications networks, program defects or other causes, or if information is destroyed or leaked as a result of unauthorized use of computers or external attacks, the Bank's performance and financial condition could be adversely affected by the suspension of settlement functions and services, damage to its social credibility and other consequences.」
The Bank specifically identifies system shutdowns, malfunctions, unauthorized use, external attacks and information leaks as risks.