Business disruption and information leaks caused by information security incidents and cyberattacks
First written in FY2022. 1 of 3 entries say "Advanced", first in FY2023. Latest entry: FY2025.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
- FY2025RestatedAnnual report
「To ensure the stable operation of information systems and networks, the Company takes necessary measures including appropriate management of information equipment and backups. As security measures, it also seeks to reduce security risks through regular training against targeted attacks and information security education.」
The Company continues to implement measures involving backups, targeted-attack drills and information security education. - FY2023AdvancedAnnual report
「To ensure the stable operation of information systems and networks, the Company takes necessary measures including appropriate management of information equipment and backups. As security measures, it also seeks to reduce security risks through regular training against targeted attacks and information security education.」
As specific measures for the information security management framework, the Company disclosed targeted-attack drills and information security education in addition to backups. - FY2022First statedAnnual report
「However, if information systems are shut down or information is leaked due to computer virus infections, unauthorized external access including cyberattacks, disasters or other events, the Group's performance may be affected through business interruption, claims for damages from business partners and other parties, and loss of trust.」
The risk that information system shutdowns or information leakage could affect performance through business interruption, claims for damages and loss of trust was explicitly disclosed for the first time as a separate item.