Risk of Business Interruption and Information Leakage from Cyberattacks and Information Security Incidents
First written in FY2021. 1 of 2 entries say "Mitigated", first in FY2024. Latest entry: FY2024.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
- FY2024MitigatedAnnual report
「In addition, the company is reviewing the configuration of its global authentication infrastructure and advancing multifactor authentication, higher authentication levels for account management, and rapid vulnerability response. Through these measures, it is strengthening IT governance across the group, raising authentication levels and enhancing measures against malware and information leakage, while building a structure capable of responding rapidly and accurately to cyber incidents.」
While describing information security risk as very high, the company disclosed strengthened measures including a global authentication infrastructure, multifactor authentication, vulnerability response and CSMS certification for vessels. - FY2021First statedAnnual report
「Recent cyberattacks have become extremely diverse and sophisticated, and comprehensive protection cannot be achieved through localised responses or product implementation alone. If information leakage caused by unauthorised access or system shutdowns caused by virus infections occurs, it may adversely affect the business activities, financial position and operating results of the group.」
The company consolidated information leakage and system shutdowns caused by virus infections as a standalone major risk for the first time. It also described measures including defence in depth; detection, response and recovery; three perspectives covering information management, cybersecurity and physical security; CSMS certification for vessels; and training.