Strengthening the Threat Management Framework through the Cybersecurity Office
First written in FY2023. 1 of 2 entries say "Advanced", first in FY2026. Latest entry: FY2026.
The whole theme swung hardest in 2021: 2 of 13 companies on the "Worse" side.
17 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「We are developing a cybersecurity risk management framework centered on the specialized Cybersecurity Office. Specifically, we gather information in collaboration with external organizations and conduct 24/7/365 monitoring of networks and devices through an integrated SOC, working to detect incidents at an early stage and respond immediately. We have also established the Orico CSIRT framework, an integrated system for managing everything from preventive security during normal operations to rapid response when an incident occurs.」
The operations of the Cybersecurity Office have been made concrete through 24/7/365 monitoring by an integrated SOC, the Orico CSIRT, supply chain management, and training and exercises. - FY2023First statedAnnual report
「Recognizing increasingly sophisticated and advanced cyberattacks and other threats as key management issues, we established a Cybersecurity Office to operate and manage our cybersecurity risk management framework. We are developing a framework for the proper handling of information by implementing organizational, technical, human and physical measures, including establishing incident response procedures, gathering the latest information in collaboration with external organizations, implementing system security measures, and providing education and training for officers and employees.」
Cyberattacks are treated as one of the top risks, with specific measures established including a specialized department, incident response, external intelligence gathering, and training and technical safeguards.