Core Business System Failure and Unauthorized Access Risk
First written in FY2017. 3 of 6 entries say "Restated". Latest entry: FY2024.
The whole theme swung hardest in 2026: 31 of 106 companies on the "Worse" side.
- FY2024MitigatedAnnual report
「For information security against external threats, the Group has installed UTM (Unified Threat Management) devices at each business location and antivirus software on each endpoint, providing dual-layer protection. However, particularly malicious external cyberattacks are becoming increasingly sophisticated and complex, making them difficult to prevent completely. Accordingly, the Group will continue to formulate and implement response measures assuming that an attack cannot be blocked.」
In addition to dual-layer protection using UTM devices and antivirus software on endpoints, it explicitly provides for the formulation and implementation of response measures assuming that protection fails. - FY2022WorsenedAnnual report
「The Group's core internal business systems use a dedicated operating system to address external attacks such as computer viruses, and it has established a dual-layer defense system for information security against external threats. However, particularly malicious external cyberattacks are becoming increasingly sophisticated and complex, making them difficult to prevent completely. Accordingly, the Group will also consider response measures assuming that an attack cannot be blocked.」
It explicitly recognizes that increasingly sophisticated and complex cyberattacks are difficult to prevent completely even with dual-layer protection. - FY2021RestatedAnnual report
「To further strengthen data management, the Group is promoting the use of cloud systems and strengthening backup arrangements between offices. In response to external attacks such as computer viruses, the Group's core internal business systems use a dedicated operating system, and it has established a dual-layer defense system for information security against external threats.」
It reiterates the use of cloud systems, backups between locations, a dedicated operating system, and dual-layer protection against the risks of system outages and unauthorized access. - FY2020RestatedAnnual report
「The Group has established information systems management rules and related regulations to ensure the proper operation and management of its information systems. In addition, to further strengthen data management, it is promoting the use of cloud systems and strengthening backup arrangements between offices.」
In addition to reiterating the risks of system outages and unauthorized access, it describes the use of cloud systems, backups between offices, dual-layer protection, and small generators as response measures. - FY2018RestatedAnnual report
「The Group strives to improve security measures and its management framework for core business systems against information security threats, natural disasters and other risks. However, deficiencies in computer systems, such as system outages or malfunctions, or unauthorized external access could affect the Group's operating results and financial condition.」
It reiterates the risks of outages and unauthorized access affecting core business systems, as well as security measures and the management framework. - FY2017First statedAnnual report
「The Group strives to improve security measures and its management framework for core business systems against information security threats, natural disasters and other risks. However, deficiencies in computer systems, such as system outages or malfunctions, or unauthorized external access could affect the Group's operating results and financial condition.」
It identifies outages, malfunctions, and unauthorized access affecting core business systems as risks and also refers to improvements in security measures and the management framework.