Japan seminar | Yoshiki Tsurumaki to discuss what internal audit should ask after a ransomware incident – implications for J-SOX, internal controls and directors’ responsibilities
Japan seminar | Yoshiki Tsurumaki to discuss what internal audit should ask after a ransomware incident – implications for J-SOX, internal controls and directors’ responsibilities
Ransomware attacks targeting supply chains are not solely an information systems issue.
In 2025, Asahi Group Holdings and ASKUL publicly disclosed cyber incidents that caused serious disruption not only to their business operations and the security of information, but also to their financial closing and disclosure processes.
The Business Research Institute will host a seminar entitled “What Should Internal Audit Ask After a Ransomware Incident? – Cyber Incidents’ Impact on J-SOX, Internal Controls and Directors’Responsibilities”, on 5 October 2026 in Tokyo, featuring Yoshiki Tsurumaki as the speaker.
At this seminar, Yoshiki Tsurumaki, Partner and Head of Japan Law Practice at LPA Tokyo, will draw on disclosed cases, court decisions, regulatory developments—including the SCS Assessment System, financial-sector guidelines and the IIA’s Third-Party Requirements—and the latest developments in cyber insurance to explain what internal audit departments should review, and to what extent, from the perspectives of J-SOX compliance and directors’ responsibilities. Participants will also receive a checklist covering three key time periods: normal operations, immediately after an incident and through the financial year-end.
- Date: Thursday, 3 December 2026, 10:00 am–1:00 pm JST
- Format: Online / in person
- Organizer: Business Research Institute (企業研究会)
- Venue: Business Research Institute Seminar Room, Hanabusa Building, 1-13-7 Higashi-Ueno, Taito-ku, Tokyo 110-0015
- Fee: Paid seminar
- Information and registration, click here