Information Asset Protection Framework
First written in FY2016. 3 of 4 entries say "Advanced", first in FY2019. Latest entry: FY2026.
The whole theme swung hardest in 2021: 2 of 13 companies on the "Worse" side.
17 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「For IT incidents, we have established an incident response organization, the “CSIRT,” under the Information Security Committee to ensure a prompt and appropriate response when such incidents occur at the company or Group companies, and will work to raise security awareness through training conducted during normal operations.」
Established a CSIRT under the Information Security Committee and specified IT incident response and routine training measures. - 2026-05-19AdvancedGeneral Meetings of Shareholders
「For IT incidents, we have established an incident response organization, the “CSIRT,” under the Information Security Committee to ensure a prompt and appropriate response when such incidents occur at the company or Group companies, and will work to raise security awareness through training conducted during normal operations.」
The company described its information asset protection framework, including a CSIRT under the Information Security Committee and regular training. - FY2019AdvancedAnnual report
「Accordingly, to strengthen risk management, we are establishing internal rules, including basic information security policies, and implementing measures including employee training.」
The measures were made more specific, moving from establishing an information security policy and providing training to developing internal rules, including basic information security policies. - FY2016First statedAnnual report
「To strengthen risk management, we have established an information security policy and are implementing measures including employee training.」
Describes the information security policy and employee training as countermeasures.