Information System Disruptions and Unauthorized Access
First written in FY2017. 2 of 5 entries say "Restated". Latest entry: FY2025.
Yoshinoya Holdings moved to the "Worse" side of this theme in 2023, 2 years before the typical company in this theme (2025).
7 other companies' latest entry also says "Worsened".
- FY2025WorsenedAnnual report
「The Group relies heavily on information and communications systems for supply chain management, store ordering, and orders and approvals at stores. The Group's information systems have implemented appropriate measures to prevent program defects, computer viruses, cyberattacks and other threats and work to reduce these risks. However, if the information and communications systems were disrupted by a malicious attack or other event, efficient operations and the timely provision of products to consumers could be hindered, and the Group's performance could be affected by damage to public confidence.」
The information systems risk disclosure now explicitly covers program defects and the potential disruption of timely product provision to consumers, in addition to dependence on ordering, store orders and approvals. - FY2023WorsenedAnnual report
「The Group relies heavily on information and communications systems for supply chain management, store ordering, and orders and approvals at stores. The Group's information systems division has implemented appropriate measures to prevent computer viruses, cyberattacks and other threats and works to reduce these risks. However, if the information and communications systems were disrupted by a malicious attack or other event, the Group might be unable to operate efficiently, and its performance could be affected by damage to public confidence.」
The previous risks of system outages and unauthorised access have been expanded to explicitly cover dependence on supply chain management, ordering, store orders and approvals, as well as cyberattacks. - FY2021RestatedAnnual report
「The Group backs up data in preparation for data loss and works to prevent breaches of confidentiality through data encryption, access controls and password management. However, if a system outage, unauthorised access or other incident were to occur, business performance could be affected by reduced operating efficiency and damage to public confidence.」
The risks of information system failures and unauthorised access, together with controls such as backups, continue to be disclosed. - FY2018RestatedAnnual report
「The Group backs up data in preparation for data loss and works to prevent breaches of confidentiality through data encryption, access controls and password management. However, if a system outage, unauthorised access or other incident were to occur, business performance could be affected by reduced operating efficiency and damage to public confidence.」
The risks of information system failures and unauthorised access, together with controls such as backups, continue to be disclosed. - FY2017First statedAnnual report
「The Group backs up data in preparation for data loss and works to prevent breaches of confidentiality through data encryption, access controls and password management. However, if a system outage, unauthorised access or other incident were to occur, business performance could be affected by reduced operating efficiency and damage to public confidence.」
The Group implements backups, encryption, access controls and password management, while identifying system outages and unauthorised access as risks.