Cybersecurity

Recognizing that protecting our customers' valuable assets and ensuring the safe and stable operation of financial services are our social responsibilities, we have identified risks related to cyberattacks and other cyber threats as one of our key risks. To strengthen management-led cybersecurity measures, we have issued our Cybersecurity Management Declaration.

Cybersecurity Initiatives

In light of the increasing sophistication and proliferation of cyberattacks and other cyber threats, driven by the emergence of new technologies such as frontier AI, and the growing severity of geopolitical risks, our management remains committed to enhancing its understanding of the latest developments. We position cybersecurity as an investment and proactively advance cybersecurity initiatives as a key management priority.

We continue to work to strengthen measures designed to address and mitigate the risk, including the establishment of CSIRT (Computer Security Incident Response Team), implementation of multi-layered defense and detection measures,enhancement of monitoring systems.
In addition, to prevent information leaks caused by cyberattacks targeting third parties and disruptions to associated services, we are enhancing our third-party risk management framework and strengthening oversight of third parties from the perspectives of IT and cybersecurity. Furthermore, we collaborate with relevant government authorities, organizations, and industry bodies, and actively participate in security communities, including the Financials ISAC.

  • Computer Security Incident Response Team. Receives reports regarding security incidents, conducts investigations, and implements appropriate response measures.
  • A framework in which financial institutions in Japan participate and collaborate to protect Japan's financial infrastructure from the threat of cyberattacks.
  • Computer Emergency Response Team. Provides overall oversight of security incidents across the MUFG Group.
Internal control