Response to Information System Failures and Cyberattacks
First written in FY2016. 3 of 8 entries say "Mitigated", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2026: 17 of 84 companies on the "Worse" side.
- FY2026WorsenedAnnual report
「In addition, as technology advances, including in AI and quantum computing, cyberattacks are becoming increasingly sophisticated and complex, requiring financial institutions to further strengthen their systems for providing safe and secure services.」
The Group newly identified that, against the backdrop of advances in AI, quantum computing, and other technologies, cyberattack threats are becoming more sophisticated and complex. - 2026-05-01MitigatedGeneral Meetings of Shareholders
「We will also upgrade our measures against cybersecurity threats, unauthorized use and AML/CFT risks, including through the use of AI, to improve the accuracy of risk forecasting and establish a control framework focused on prevention.」
The company has outlined an approach focused on using AI and prevention in response to cybersecurity, unauthorized use and AML/CFT risks. - FY2025WorsenedAnnual report
「The threat of cyberattacks surrounding financial institutions is becoming increasingly serious.」
While recognizing that the threat of cyberattacks has become increasingly serious, the Group continues its response through CSIRTs, training, and collaboration with external experts. - FY2022MitigatedAnnual report
「The Group has established Computer Security Incident Response Team (CSIRT) teams at its principal companies and participates in joint training with Group companies and industry associations, anticipating a range of accidents and system failures.」
In addition to distributed infrastructure, the Group has implemented specific cyber risk measures, including establishing CSIRTs at its principal companies, conducting accident and system failure drills, and running phishing email and BEC training. - FY2020MitigatedAnnual report
「In addition, past digitalization initiatives have reduced the labor required for operations and established highly secure internal infrastructure, providing systems that enable business continuity even as conditions deteriorate.」
In addition to the previous distribution of servers and other measures, the Group explains that digitalization and highly secure internal infrastructure provide systems that enable business continuity during the spread of infectious diseases. - FY2019RestatedAnnual report
「Operations centers and core servers are distributed across multiple locations to minimize the impact of disasters, system failures, and other events. However, if an event exceeding the assumptions occurs, it could significantly impede business operations, require substantial investment for recovery, and lead to a loss of trust.」
The Group continues to address system failures and cyberattacks through the distributed placement of operations centers and core servers. - FY2017RestatedAnnual report
「Operations centers and core servers are distributed across multiple locations to minimize the impact of disasters, system failures, and other events. However, if an event exceeding the assumptions occurs, it could significantly impede business operations, require substantial investment for recovery, and lead to a loss of trust.」
The Group continues to address the risks of system failures, cyberattacks, and information leaks through the distributed placement of operations centers and core servers. - FY2016First statedAnnual report
「To minimize the risks of failures caused by defects in this hardware and software, disruption of communications networks caused by natural disasters or accidents, and system outages caused by cyberattacks and other events, the Group has distributed its operations centers and core servers across multiple locations.」
The distribution of core servers and other systems across multiple locations is described as a measure to mitigate the risks of system failures and cyberattacks.