Business Continuity of Financial Services and Cybersecurity Measures
First written in FY2016. 5 of 7 entries say "Advanced", first in FY2017. Latest entry: FY2026.
9 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「The Bank formulated its “Basic Cybersecurity Policy,” positioned cybersecurity risk as an important management issue, clarified the objectives and direction of its response, and works continuously to improve its management framework. To respond to cyberattacks while improving customer services and operational efficiency through digital technologies, it has established the Iwate Bank CSIRT as a permanent body and holds regular meetings in principle every other month.」
The Bank has made its management of cybersecurity as an important management issue and top risk more concrete, moving from its previous CSIRT operations to the formulation of a basic cybersecurity policy, a permanent CSIRT, regular meetings held in principle every other month, and policy deliberations by the Board of Directors. - FY2024AdvancedAnnual report
「To respond to cyberattacks while improving customer services and operational efficiency through digital technologies, the Bank has established the Iwate Bank CSIRT as a permanent body, holds regular meetings in principle every other month, and works to strengthen its information security incident management framework.」
The Bank has moved from previous measures such as a joint CSIRT to a more specific operating structure featuring a permanent in-house CSIRT and regular meetings held in principle every other month. - FY2021AdvancedAnnual report
「The duties of officers and employees are carried out after implementing appropriate infection-control measures, including telework, distributed work arrangements and avoiding meetings held in person, with a structure in place to maintain and continue essential operations as a financial institution even if an infection occurs.」
In addition to the existing business continuity plan, the Bank has specified measures including its novel coronavirus response headquarters, response guidelines, telework and distributed work arrangements as business continuity measures. - FY2020AdvancedAnnual report
「The duties of officers and employees are carried out after implementing appropriate infection-control measures, including telework, distributed work arrangements and avoiding meetings held in person, with a structure in place to maintain and continue essential operations as a financial institution even if an infection occurs.」
In addition to the existing business continuity plan, the filing describes an infectious disease response plan, telework and distributed work arrangements as specific business continuity measures. - FY2018RestatedAnnual report
「To prepare for such situations, the Bank formulated a business continuity plan and established an emergency communications structure, while working to minimise damage through measures including seismic retrofitting of branches.」
The filing continues to describe a business continuity plan, an emergency communications structure and seismic retrofitting of branches to prepare for natural disasters and system failures. - FY2017AdvancedAnnual report
「To prepare for such situations, the Bank formulated a business continuity plan and established an emergency communications structure, while working to minimise damage through measures including seismic retrofitting of branches.」
In addition to the joint CSIRT and other measures, the filing describes a business continuity plan, an emergency communications structure and seismic retrofitting of branches in preparation for natural disasters and system failures. - FY2016First statedAnnual report
「As a cybersecurity measure, the Bank established the “Three Northern Tohoku Banks Joint CSIRT” jointly with Aomori Bank and Akita Bank and worked to share information and strengthen security. It also concluded a “Mutual Support Agreement in the Event of a Large-Scale Disaster” with the 13 banks participating in the Regional Banks Joint Center and NTT DATA.」
The filing describes joint CSIRT arrangements and a mutual support agreement as measures to maintain services in the event of cyberattacks or large-scale disasters.