Risk of Core-System Outages, Malfunctions and Unauthorized Use
First written in FY2016. 2 of 6 entries say "Restated". Latest entry: FY2025.
The Keiyo Bank moved to the "Worse" side of this theme in 2025, the same year as the typical company in this theme.
3 other companies' latest entry also says "Reframed".
- FY2025ReframedAnnual report
「③ Cybersecurity risk If incidents such as computer system outages or information leaks occur as a result of cyberattacks or computer virus infections, the bank may incur unexpected losses and suffer a decline in public confidence, which could affect its operating results and financial condition. The bank works to prevent incidents by implementing multilayered technical measures. To minimize the impact on operations and service provision if an incident occurs, it has established contingency plans and incident response manuals, developed its internal framework, and implemented measures including personnel development and regular training. The bank continues to work to improve the effectiveness of its measures against increasingly serious threats, including cyberattacks and computer virus infections.」
Cybersecurity was organized as a standalone item rather than being included in the previous description of system disruption risk, with incident response manuals, personnel development and regular training explicitly disclosed. - FY2024RestatedAnnual report
「To minimize the impact on operations and service provision in the event of a major system disruption or cyberattack, the bank has established contingency plans and is working to develop its framework and raise awareness through exercises and training.」
The bank continues to maintain contingency plans, exercises and training, system and communications monitoring, third-party vulnerability assessments, and measures including redundancy and backup centers. - FY2021MitigatedAnnual report
「To minimize the impact on operations and service provision in the event of a major system disruption or cyberattack, the bank has established contingency plans and is working to develop its framework and raise awareness through exercises and training. It has also implemented technical measures including system and communications monitoring and vulnerability assessments by third parties.」
The bank's response to system risk has been expanded beyond redundancy and backup centers to include contingency plans, exercises and training, monitoring, and third-party vulnerability assessments. - FY2018WorsenedAnnual report
「Computer systems and other systems may be disrupted by poor system quality, human error, cyberattacks, computer viruses, natural disasters, terrorism and other external factors. Depending on the scale of the disruption, this could affect the bank's operations, operating results and financial condition.」
In addition to the previously cited outages, malfunctions and unauthorized use, the bank explicitly identifies cyberattacks, computer viruses, natural disasters, terrorism and other factors as causes of system disruptions. - FY2017RestatedAnnual report
「To address these risks, the bank has implemented redundancy for computers, communication lines, power facilities and other infrastructure supporting its core systems, established backup centers in preparation for damage to computer centers, and adopted measures including decentralized storage of critical information.」
The bank continues to maintain core system redundancy, backup centers and decentralized storage of critical information. - FY2016First statedAnnual report
「Computer systems and other systems may be disrupted by computer system outages, malfunctions, unauthorized use or other causes. Depending on the scale of the disruption, this could affect the bank's operations, operating results and financial condition.」
The bank cites system redundancy, backup centers and decentralized storage of critical information as countermeasures.