Preventing Unauthorized Access and Other Incidents Under the Information Security Policy
First written in FY2019. 5 of 6 entries say "Advanced", first in FY2021. Latest entry: FY2026.
1 other company's latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「As a result of these ongoing initiatives, we achieved the near-term response target, Tier 2, under the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), one year ahead of schedule, and」
In addition to the Basic Information Security Policy and TBS-CSIRT, the company introduced the Group Basic Policy and ISMS-compliant guidelines, ASM, CASB and biometric MFA, and achieved NIST CSF Tier 2 one year ahead of schedule. - FY2024AdvancedAnnual report
「During the fiscal year, we introduced a zero-trust infrastructure based on the network security model known as SASE (Secure Access Service Edge). All communications are inspected regardless of where information is located or how employees work, enabling secure remote access.」
In addition to the Basic Information Security Policy and TBS-CSIRT, the company specified measures including the introduction of a SASE-based zero-trust infrastructure, an increase in specialized personnel and participation in NISC exercises. - FY2023AdvancedAnnual report
「However, as cyberattack methods have become increasingly sophisticated and advanced in recent years, security risks to our various systems have been rising year after year. New security threats, including ransomware and threats using cutting-edge technology that exceed expectations, have emerged, and in some cases require substantial investment to address. In other cases, significant compensation payments may arise from the leakage of personal information. We have taken measures such as obtaining cyber insurance coverage in preparation for such contingencies, but」
In addition to strengthening TBS-CSIRT, the company explicitly disclosed measures including cyber insurance coverage, making its security measures more specific. - FY2022AdvancedAnnual report
「As teleworking became commonplace with the spread of COVID-19, …the TBS Group strengthened its dedicated security response team, TBS-CSIRT, and implemented a range of security measures.」
In addition to the Basic Information Security Policy, the company strengthened TBS-CSIRT in response to teleworking and the shift to cloud-based systems, and disclosed measures including cyber insurance coverage. - FY2021AdvancedAnnual report
「In addition, as cyberattack methods have become increasingly sophisticated and advanced in recent years, security risks to our various systems have been rising year after year. The TBS Group has established a dedicated security response team, TBS-CSIRT, and is implementing a range of security measures.」
In addition to the Basic Information Security Policy, the company explicitly disclosed the establishment of the dedicated response team TBS-CSIRT. - FY2019First statedAnnual report
「We have established a Basic Information Security Policy to prevent system destruction and data leakage or theft caused by unauthorized access, computer viruses and other threats, and to promote the appropriate use of our networks.」
The Basic Information Security Policy was disclosed for the first time as a standalone topic covering measures against unauthorized access, viruses, data leakage and other threats.