Service disruption caused by system failures or unauthorized access
First written in FY2023. 2 of 4 entries say "Mitigated", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2026: 17 of 84 companies on the "Worse" side.
- FY2026MitigatedAnnual report
「To address this risk, we are working to improve the implementation of regular backups and the effectiveness of our internal response structure in the event of system failures. In June 2025, the company, and in May 2007, its consolidated subsidiary サン・システムプランニング, obtained certification under ISO 27001, the international standard for information security management systems (ISMS), and we are working to strengthen information security measures.」
In addition to the company, the newly consolidated サン・システムプランニング was also disclosed as having obtained ISO 27001 certification, clarifying the scope of the Group's information security measures. - FY2025MitigatedAnnual report
「In June 2025, we obtained certification under ISO 27001, the international standard for information security management systems, and are working to strengthen information-security measures.」
ISO 27001 certification was obtained in addition to regular backups and an incident-response structure. - FY2024WorsenedAnnual report
「As system-related risks are expected to increase as we develop systems for new services, we will strengthen regular backups and the internal structure for responding to failures. We will also seek ISO/IEC 27001 certification and improve the effectiveness and scope of IT controls for appropriate risk management.」
The expected increase in system risk from new-service development is explicitly stated. Regular backups, incident-response systems and ISMS certification are the response measures. - FY2023First statedAnnual report
「If a system failure occurs in the cloud service or a malicious third party gains unauthorized access, or another problem occurs, our services could be disrupted and our results could be affected.」
Cloud failures, unauthorized access and system risks associated with digital-platform development could increase.