Risk of system outages and information leaks caused by cyberattacks
First written in FY2020. 2 of 4 entries say "Advanced", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
- FY2026AdvancedAnnual report
「A whitelist-based protection system (OS-protection type) has been introduced on all PCs and major servers to prevent the execution of any programs other than those authorized to run. This has established a framework to prevent infections in advance from unknown malware and zero-day attacks, which are difficult for conventional software to detect.」
In addition to conventional network segregation, firewalls and antivirus protection, the company introduced whitelist-based protection and targeted-attack email training. - FY2022AdvancedAnnual report
「In addition, we conduct regular awareness activities to address spam, including periodic testing using simulated targeted emails.」
The company disclosed awareness measures including regular simulated targeted-email campaigns, in addition to network segregation, firewalls, antivirus protection and migration to the cloud. - FY2021MitigatedAnnual report
「Our Group avoids the risk of attacks on its monitoring systems because they are not directly connected to the internet. For administrative systems, firewalls are installed at the internet gateway, and external access is essentially blocked in its entirety. Antivirus software has also been installed on servers and PCs, which are monitored in real time. In addition, the company is moving its servers to the cloud with robust security measures.」
The company disclosed measures to address cyberattack risks, including network segregation for monitoring systems, firewalls, antivirus protection and migration to the cloud. - FY2020First statedAnnual report
「Our Group conducts its business using various systems, including monitoring systems. Cyberattacks on these systems could result in business interruptions due to system outages and the leakage of various types of information.」
The risk of system outages and information leaks caused by cyberattacks was disclosed independently for the first time as a business risk.