IT risks, including cyberattacks and customer information leaks
First written in FY2022. 1 of 3 entries say "Mitigated", first in FY2024. Latest entry: FY2025.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
- FY2025RestatedAnnual report
「We monitor threats such as unauthorized access and virus infections 24 hours a day, 365 days a year, and when an incident occurs, establish a cyber incident response structure and take swift action and other measures to prevent recurrence.」
Continued 24/365 monitoring, education and training, incident response and recurrence prevention measures for cyberattack and customer information leak risks. - FY2024MitigatedAnnual report
「Across the Group, we are promoting measures to prevent information leaks and viruses and monitoring threats such as unauthorized access and virus infections 24 hours a day, 365 days a year. When an incident occurs, we establish a cyber incident response structure and take swift action and measures to prevent recurrence.」
For cyberattack and customer information leak risks, the company specified 24/365 monitoring, incident response and recurrence prevention arrangements. - FY2022First statedAnnual report
「If information systems are disrupted by cyberattacks, such as computer program failures or computer viruses, this could affect the Group's operations, including through the loss of important data and disruptions to aircraft operations.」
Information system disruptions, cyberattacks and personal information leaks were newly identified systematically as major risks that could affect operations, the brand and business performance.