Establishment of the Group IT Governance and Cybersecurity Framework
First written in FY2020. 3 of 4 entries say "Advanced", first in FY2023-Q2. Latest entry: FY2026.
The whole theme swung hardest in 2025: 2 of 9 companies on the "Worse" side.
6 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「As part of these efforts, we established a Global Capability Center (GCC) in India in May 2025 and are promoting initiatives to accelerate DX globally through the use of data and AI, enhanced cybersecurity, and advanced software development.」
The Group's IT governance and DX infrastructure progressed through the establishment of an India-based GCC and the development of bases for data and AI utilization, cybersecurity, and software development. - FY2024AdvancedAnnual report
「We introduced the CXO system in the fiscal year ended March 2023 and have been strengthening corporate functions across the Group while expanding the system in stages.」
Corporate functions, including Group IT and digital governance, progressed through the phased expansion of the CXO structure, including the CIO and CDO roles. - FY2023-Q2AdvancedAnnual report
「In addition, based on the promotion of IT governance, we aim to create group synergies and contribute to global management through IT by continuously sharing information at regular conferences attended by IT leaders from the Group's domestic and overseas insurance operating companies, and by promoting collaborative initiatives among Group companies aligned with their respective areas of concern.」
Group IT governance was translated into concrete operations through regular meetings of domestic and overseas IT leaders and collaborative initiatives among Group companies. - FY2020First statedAnnual report
「The Group also established the Basic Policy on Group IT Governance and shared within the Group the direction for developing an IT governance framework based on COBIT5.」
In light of the Group's global dependence on information systems, controls were established under COBIT5, the Basic Policy on Group IT Governance, and the Basic Policy and Response Regulations for Cybersecurity.