Establishment of the Risk Management and Internal Control Framework
First written in FY2018. 6 of 7 entries say "Advanced", first in FY2019. Latest entry: FY2026.
- FY2026AdvancedAnnual report
「To establish a group-wide risk management framework, we established the Risk Management Committee and put in place the “Basic Risk Management Rules,” which apply to our group. The Risk Management Committee is administered by our General Affairs Department and meets 2 times a year with the president as chair. The committee identifies and analyzes risks within our group, discusses risk appetite and measures to address loss risks based on its evaluations, and verifies risk events that have materialized.」
The company provided greater detail on the operation of risk identification, analysis, and evaluation, risk appetite, and verification of materialized risk events, and specified a framework involving 2 meetings per year. - 2026-04-30AdvancedGeneral Meetings of Shareholders
「As an information-security measure, we established TOHO-CSIRT, put in place a framework to prepare for serious cyber incidents, and worked to strengthen coordination among organizations and technical response through drills. We also established Basic Rules for Emergencies, setting out principles of action in the event of a major disaster and preparing the entire Group for emergencies. In addition, the Risk Management Meeting and Sustainability Committee coordinated their management of sustainability-related risks, including climate change.」
The management and operation of information security, disaster response and sustainability-related risks were specified. - FY2025AdvancedAnnual report
「Under the Risk Management Committee, we have established 3 committees, the Compliance Committee, Internal Control Committee, and Information Security Committee, creating a multifaceted risk management framework.」
The roles of the Risk Management Committee and the 3 committees, reporting lines to the Board of Directors, and the operation of whistleblower reporting, information security, and internal controls were described in greater detail. - FY2024AdvancedAnnual report
「The Risk Management Committee is administered by the General Affairs Department and, in principle, meets 2 times a year with the company's president as chair. The committee identifies and evaluates risks facing our group and evaluates and considers responses and recurrence-prevention measures for risk events that have occurred, as well as preventive measures for anticipated risk events. Under the Risk Management Committee, we have established 3 committees, the Compliance Committee, Internal Control Committee, and Information Security Committee, creating a multifaceted risk management framework.」
The company disclosed specific details on the frequency of Risk Management Committee meetings, the procedures for evaluation and recurrence prevention, and the framework comprising the 3 committees for compliance, internal control, and information security. - FY2022AdvancedAnnual report
「During the fiscal year, we established a multifaceted risk management framework by adding an Information Security Committee.」
In addition to the existing Risk Management Committee, Compliance Committee, and Internal Control Committee, the company established an Information Security Committee. - FY2019AdvancedAnnual report
「The Risk Management Committee is administered by the General Affairs Department and met 2 times in total during the fiscal year. It evaluates responses to risk events that have occurred and measures for addressing anticipated risk events. In addition, it has established a Compliance Committee to promote compliance with laws and regulations and an Internal Control Committee to promote internal controls over financial reporting.」
The company disclosed specific details of the operating framework, including 2 meetings of the Risk Management Committee during the fiscal year and the Compliance Committee and Internal Control Committee. - FY2018First statedAnnual report
「Based on the “Basic Policy on the Internal Control Framework” and under the “Basic Risk Management Rules,” we have established a Risk Management Committee chaired by the head of management to maintain business continuity and sound management. The committee determines risk management policies for our group and has established communication and reporting procedures and a crisis management framework.」
The company established the Risk Management Committee, communication and reporting procedures, and a crisis management framework, outlining a system for maintaining business continuity and sound management.