Strengthening Information Security Management Systems and Training
First written in FY2017. 5 of 8 entries say "Advanced", first in FY2018. Latest entry: FY2026.
- FY2026AdvancedAnnual report
「We have established “CEC-SIRT,” an incident response organization that includes our in-house SOC, and built a 24-hour-a-day, 365-day monitoring framework. We also implement layered defense using EDR and other tools, detect and respond rapidly to suspicious communications, manage the use of generative AI under our usage guidelines, and continuously provide education and training for officers, employees and partner staff.」
Information security management has been made more specific through 24-hour-a-day, 365-day monitoring by CEC-SIRT, layered defense using EDR and other tools, generative AI usage guidelines, and education for relevant personnel. - FY2025RestatedAnnual report
「We are working to reduce risk by introducing security equipment and services to address each information security risk, establishing information security regulations, strengthening cooperation with external organizations by joining information-security-related associations including the Nippon CSIRT Association, maintaining appropriate controls including ISO/IEC 27001 certification and the Privacy Mark for our data centers and other facilities, conducting information security training, using SOC (Security Operation Center) for incident detection and response, and establishing “CEC-SIRT (CEC Security Incident Response Team)” as our CSIRT to strengthen our response capabilities for information security incidents.」
We continue to maintain a management framework comprising security equipment and services, cooperation with external organizations, certifications, training, SOC and CEC-SIRT. - FY2022AdvancedAnnual report
「Introducing security equipment and services to address each information security risk, establishing information security regulations, and strengthening cooperation with external organizations by joining information-security-related associations, including the Nippon CSIRT Association」
In addition to the existing ISMS, training, SOC and CEC-SIRT, the disclosure specifies the introduction of security equipment and services and cooperation with external organizations. - FY2021AdvancedAnnual report
「We are working to reduce risk by introducing security equipment to address each information security risk, establishing information security regulations, maintaining appropriate controls including ISO/IEC 27001 certification and the Privacy Mark for our data centers and other facilities, conducting information security training, using SOC (Security Operation Center) for incident detection and response, and establishing CEC-SIRT, a CSIRT (Computer Security Incident Response Team), to strengthen our response capabilities.」
In addition to the existing regulations, training and CSIRT, the disclosure specifies the use of SOC and the establishment of CEC-SIRT, making the detection and response framework more explicit. - FY2020RestatedAnnual report
「Our group has established information security regulations and maintains appropriate controls, including certification under the ISMS conformity assessment scheme for our data centers and the Privacy Mark. To strengthen our response capabilities, we have established CSIRT (Computer Security Incident Response Team), an incident response organization responsible for incident detection, response when incidents occur and minimizing damage. We also conduct information security training across the group and are working to strengthen our information management systems.」
We continue to manage information security through ISMS, the Privacy Mark, CSIRT and training across the group. - FY2019AdvancedAnnual report
「Our group has established information security regulations and maintains appropriate controls, including certification under the ISMS conformity assessment scheme for our data centers and the Privacy Mark. To strengthen our response capabilities, we have established CSIRT (Computer Security Incident Response Team), an incident response organization responsible for incident detection, response when incidents occur and minimizing damage. We also conduct information security training across the group and are working to strengthen our information management systems.」
In addition to ISMS and the Privacy Mark, the disclosure specifies the establishment of CSIRT to strengthen incident response capabilities. - FY2018AdvancedAnnual report
「We continuously review our information security management system in accordance with ISMS requirements and operate it efficiently. We also regularly review and enhance our information security policies, information management regulations and other related rules.」
In addition to continuously reviewing ISMS, our information security policy and information management regulations, the measures described include access restrictions using IC cards, antivirus protection, hard-disk encryption and social media usage guidelines. - FY2017First statedAnnual report
「In addition, we conduct information security training across the group once every 6 months and are working to strengthen our information management systems.」
We conduct information security training across the group once every 6 months and are working to strengthen our management systems.