Intrusion into Information Networks and System Outages
First written in FY2016. 4 of 9 entries say "Advanced", first in FY2020. Latest entry: 2026-10-01.
The whole theme swung hardest in 2026: 17 of 84 companies on the "Worse" side.
- 2026-10-01AdvancedGovernance
「We reviewed our management framework and related content with reference to NIST Cybersecurity Framework 2.0, published by the National Institute of Standards and Technology (NIST) in FY2024.」
The company has given concrete form to a review of its management framework based on NIST Cybersecurity Framework 2.0 and external evaluations, in addition to its existing information security measures such as a CSIRT, education and training, and vulnerability assessments. - FY2026AdvancedAnnual report
「We seek to prevent incidents and minimise damage through the continued implementation of measures including building an environment based on a zero-trust security model, vulnerability assessments, education and training, and support and evaluation of group companies based on guidelines.」
In addition to existing network management, AI monitoring and the CSIRT, the group has specified measures including zero-trust security, vulnerability assessments, and support and evaluation of group companies. - FY2025AdvancedAnnual report
「In addition to establishing controls based on our information security policy, we have established a CSIRT and are working to strengthen security across the group through rapid response and damage containment when security incidents such as cyberattacks occur, as well as security education for officers and employees and training against targeted attacks during normal operations.」
In addition to existing network restrictions and AI monitoring, the group has introduced an information security policy and a CSIRT, and has established incident response, education and training as group-wide measures. - FY2024ReframedAnnual report
「Our group uses various IT systems to promote its businesses and improve operational efficiency, and handles confidential information of business partners and customers' personal information through its business activities. In managing information systems and information networks, we focus on stable operation and security measures, taking necessary steps such as properly managing servers and backing up information, while working to reduce security risks through information-security education, including training against targeted attacks.」
The disclosure has been expanded from the traditional risks of network intrusion and system failures to cover information-security risks generally, including confidential and personal information, unauthorised access, viruses and information leaks. - FY2020AdvancedAnnual report
「In addition, to detect and respond immediately to abnormalities if an intrusion occurs, we monitor users' operations and have installed software on every computer within the company that uses AI to analyse operations and issue alerts when activity deviates from normal patterns.」
In addition to existing connection restrictions and training, the group has installed AI-based software for analysing operations and issuing alerts on every computer within the company. - FY2019RestatedAnnual report
「As a measure to reduce intrusion risk, we regularly conduct training against targeted attacks and other threats and seek to raise system users' security awareness.」
The group continues to implement measures against intrusion into information networks, including targeted-attack training, restricting connection points, and allowing only authorised data to pass through. - FY2018RestatedAnnual report
「Because an external party penetrating the internal network via the internet could cause a serious disruption, we regularly conduct training against targeted attacks and other threats as a measure to reduce intrusion risk, and seek to raise system users' security awareness.」
The company reconfirms the risk of external intrusion and describes measures including targeted-attack training, restricting connection points, and allowing only authorised data to pass through. - FY2017RestatedAnnual report
「If an external party were to penetrate the internal network via the internet, a serious disruption could occur.」
The company reiterates the possibility of serious disruptions caused by external network intrusion and describes measures including dedicated servers and restricting connection points. - FY2016First statedAnnual report
「If an external party were to penetrate the internal network via the internet, a serious disruption could occur.」
The group anticipates serious disruptions caused by external intrusion and manages them through dedicated servers, limiting connection points, and allowing only data from authorised users to pass through.