Risk of business interruption caused by system failures or unauthorized use
First written in FY2017. 2 of 6 entries say "Mitigated", first in FY2021. Latest entry: 2026-09-18.
The whole theme swung hardest in 2026: 16 of 83 companies on the "Worse" side.
7 other companies' latest entry also says "Advanced".
- 2026-09-18AdvancedChanges in Directors and Officers
「For the purpose of clarifying executive-level responsibility for cybersecurity, further enhancing the management framework, and speeding up decision-making when incidents occur, we have established the position of Chief Information Security Officer (CISO) and will appoint the following director.」
In response to the previously identified risk of increasingly frequent and sophisticated cyberattacks, the Bank established the CISO position effective 1 October 2026, specifying executive-level responsibility and the decision-making framework for incidents. - FY2026WorsenedAnnual report
「Information Security Risk Increasing and More Sophisticated Cyberattacks」
The increase and growing sophistication of cyberattacks was identified as a top risk in connection with system failure and unauthorized-use risk. - FY2023MitigatedAnnual report
「In addition, we have formulated action plans for system failures and other incidents and conduct regular drills, while working to strengthen our ability to respond to customers during such incidents.」
In light of past online system failures, the disclosure describes the formulation of action plans, regular drills, and efforts to strengthen customer response capabilities during system failures. - FY2022MaterialisedAnnual report
「From 26 to 27 March 2022, a power failure at a data center operated by an outsourced service provider caused a complete outage of the Bank's online systems, temporarily preventing transactions through ATMs, internet banking, and other services.」
System failure risk materialized, temporarily making ATMs, internet banking, and other services unavailable. The Bank stated that it would work to prevent recurrence, strengthen oversight of outsourced service providers, and improve its ability to respond to customers. - FY2021MitigatedAnnual report
「We take measures including backing up data and duplicating communications lines, and have established a backup system for core systems in preparation for large-scale disasters and other events. We have also established the "Security Standard" and defined specific security measures, thereby working to ensure system security, including measures against the increasingly sophisticated cyberattacks seen in recent years.」
Measures against system failure and unauthorized-use risk continue to include backups, redundant communications lines, core-system backup systems, and countermeasures against cyberattacks. - FY2017First statedAnnual report
「System outages or malfunctions, failures of communications lines, or unauthorized use of computers could adversely affect business operations and the Bank's reputation in society.」
The disclosure identifies data backups, redundant communications lines, a backup system for core systems, and the Security Standard as countermeasures.