Company: CNCKW
Filing Date: 2025-07-30
Form Type: 20-F
Source: 0001628280-25-036727
Chunk: 266

Company: Coincheck Group N.V.
Filing Date: 2025-07-30
Form: 20-F
Item: Item 16
Chunk 266
---
cybersecurity risk assessment processes designed to help identify material cybersecurity risks to our
critical systems, information, products, services, and broader enterprise IT environment;
•a security team responsible for managing our cybersecurity risk assessment processes and security
controls;
•the use of external consultants or other third-party experts and service providers, where considered
appropriate, to assess, test, or otherwise assist with aspects of our cybersecurity controls;
•annual cybersecurity and privacy training of employees, including incident response personnel and
senior management, and specialized training for certain teams depending on their role and/or access to
certain types of information, such as consumer information; and
•a third-party risk management process that includes internal vetting of certain third-party vendors and
service providers with whom we may share data.
Over the past fiscal year, while we have had two cybersecurity incidents, we have not identified risks from 
known cybersecurity threats (including as a result of those two cybersecurity incidents) which have materially 
affected or are reasonably likely to materially affect us, including our operations, business strategy, operating 
results, or financial condition. As a result of these two recent incidents, we enhanced employee training and 
background checks for both new and existing employees, but there is still no assurance that similar attacks will not 
successfully occur in the future. We will continue to monitor and assess our cybersecurity risk management program 
as well as invest in and seek to improve such systems and processes as appropriate. If we were to experience a 
material cybersecurity incident in the future, such incident may have a material effect, including on our operations, 
business strategy, operating results, or financial condition. For more information regarding cybersecurity risks that 
we face and their potential impacts on our business related, see the section titled “Risk Factors” in Part I, Item 3.D, 
of this report.
Governance
With oversight from our Board, the Risk Committee and Audit Committee have collective primary 
responsibility to assist the Board fulfill its ultimate oversight responsibilities relating to risk assessment and 
management, including relating to cybersecurity and other information technology risks. The Risk Committee 
oversees our enterprise risk management as a whole, with its primary focus being system and operational risk, 
information and cybersecurity risk, reputational risk, and business continuity risk, while the risks relating to 
financial matters, such as financial reporting and internal controls, liquidity, credit and market risk, and legal and 
compliance, are the priorities of the Audit Committee with respect to its oversight role for enterprise risk 

155

management.