Japan’s New Cyber Security Strategy

Japan has recently issued the outline for its ‘Next Cyber Strategy’ which is likely to be approved by Cabinet in September 2021. Importantly, this is the first time that Japan has mentioned any country that is posing threat to Japan’s national security - that country is China.

The strategy is intended to run for three years and has been prepared in the backdrop of increasing cyber attacks from China and deteriorating relations with that country on the issue of Taiwan

Japan has also gradually integrated cyber security into boosting its relations in the ASEAN region, offering platforms for collaboration with individual Southeast Asian countries as well as the United States through additional coordination. Japan’s relations with Russia are also deteriorating and Japan perceives that Russia was also responsible for cyber attacks on Japan’s critical infrastructures.

The new national strategy has been formalised after soliciting public comment and states that China is believed to be conducting cyber attacks to steal information from firms linked to the military and others with advanced technologies, while Russia is suspected of carrying them out with military and political purposes.The strategy has been finalised by the special task force on cybersecurity strategies headed by Chief Cabinet Secretary, Katsunobu Kato. He had instructed the members to “enhance defence, deterrence and assessment capabilities and strengthen cooperation among relevant bodies to protect security interests.” 

Realising that cyberspace has become a foundation of social and economic activity, it commits to establish a Digital Agency with the aim of achieving “people-friendly digitalisation, with no-one left behind.” In the external environment, it observes the growing interstate competition in the spheres of politics, economy, military affairs, and technology causing geopolitical tensions, even during normal times. 

The outline states that circumstances surrounding cyberspace have taken on an appearance that is neither peacetime nor wartime. On the nature of threats, it observes that there are increasing threats of organised and sophisticated cyber attacks, including those suspected of being state-sponsored, with the aim of service disruption of critical infrastructure, theft of personal information and intellectual property, and interference with democratic processes. It also observes that China, Russia and North Korea are building their cyber capabilities of their military and other institutions.

In 2014, Japan established the national Cybersecurity Strategic Headquarters reporting to the Cabinet for the purpose of effectively and comprehensively promoting cybersecurity policies. The Cybersecurity Strategic Headquarters is headed by the Chief Cabinet Secretary and comprises his deputy who is the Minister-in-charge of Cybersecurity, and other senior government Minister. This body closely coordinates with the National Security Council of Japan reflecting importance given to the cybersecurity in overall national strategy.

A year later in 2015, the National Centre of Incident Readiness and Strategy for Cybersecurity (NISC) was created by upgrading the National Information Security Centre, which was established in 2005. The NISC serves as the secretariat of the Cybersecurity Strategy Headquarters, working together with the public and private sectors on a variety of activities to create a “free, fair and secure cyberspace”. It functions as the focal point in coordinating intra-government collaboration and promoting partnerships between industry, academia, and public and private sectors. .

The Japanese strategy considers cyber security as value creation enabler for socio-economic vitality and sustained development as also an essential aspect for national security. 

  • It stresses on development of secured IoT system, protection of critical infrastructure through public -private partnership, creation of new effective information sharing and collaboration framework, enhancing security measures for national government, encouraging cyber security at academia and research institutes, and enhancing readiness for massive cyber-attack crisis and importantly taking proactive measures for cyber defence and combating cyber crime.
  • Japan places considerable importance to building a trustworthiness in value chains and decides to take appropriate steps in this direction. It states: “security products and services provided in the market must be trustworthy.” Japan emphasises the use of indigenous services and equipment. It plans to make inexpensive, effective, and accessible security services and simple insurance products widely available for SMEs.
  • Japan places greater emphasis on public awareness programme. It plans to advance “DX with Cybersecurity” (DX is a strategy of enabling business innovation predicated on the incorporation of digital technologies into your operational process, products, solutions, and customer interactions) as a society-wide effort to provide “Plus Security” knowledge to various human resources who may not necessarily have expertise or work experience related to IT or security, including management and executives, and ensure smooth collaboration with security experts both inside and outside the organization.
  • Data protection is an important priority: The personal information of the people and information concerning intellectual property, which is a source of international competitiveness, are important assets that the national government must protect. The vulnerabilities for data hosted on cloud has been focused and Japan commits to make people aware about it.
  • Japan commits to strengthen its defence capabilities by securing the nation’s resilience through enhanced capabilities of the Self Defence Forces and other government institutions. Japan also plans to enhance capabilities to detect, investigate, identify the attackers and deter. 
  • It commits support for ‘Free, Fair and Secure Cyberspace’, for strengthening capabilities of defence, deterrence and situational awareness and international cooperation and collaboration and would promote the rule of law in cyberspace. Japan along with others is pushing for strict international law for the governance of the cyberspace.

This strategy calls for enhancing deterrence through the Japan-US alliance by holding joint exercises of the Japanese Self-Defense Forces, US forces.ASEAN partners.

For economic security, this strategy focuses securing the safety of key infrastructure for overseas communications, including submarine communication cables, and creating safety and credibility standards for information technology devices.The strategy reflects the current perception of cyber threats and its ambition to develop a strong deterrent capability against its adversaries. The strategy also indicates growing confidence in dealing with its neighbours.

The Chinese Foreign Ministry has severely criticised Japan for the new cyber security strategy and spokesman  blamed Japan for “groundless slander” against China and Russia on cybersecurity.  He further stated that Japan bad relations with all its neighbours.

While Japan alone may not be able to counter Chinese cyber attacks, in coordination with US and others it can achieve the strategic equilibrium in cyberspace.  In this respect, it can play an important role in countering the forces that are creating instability in that region.   

Intelligence Online:        Bangkok Post:      Times of India:     IFRI:        Image:Unsplash

You Might Also Read:

IISS: Cyber Capabilities & National Power Rankings:

 

« Endpoint Security Is More Important Than Ever
New CSPM Report Highlights The Perceived Security Gap For Cloud Infrastructure »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Link11 GmbH

Link11 GmbH

Link11 provides DDoS protection solutions to protect websites and complete server infrastructures from DDoS attacks.

K7 Computing

K7 Computing

K7 provides antivirus and internet security products for business and home users.

Cyber8Lab

Cyber8Lab

Cyber8Lab provides cybersecurity training programmes simulating real world cybersecurity incidents such as web defacement, malware, phishing, digital forensics analysis and wireless intrusion.

Managed Security Solutions (MSS)

Managed Security Solutions (MSS)

MSS deliver consultancy services and managed security services for IT departments who may lack the time, resources, or expertise themselves.

Seavus

Seavus

Seavus is a software development and consulting company with a proven track-record in providing successful enterprise-wide business solutions including Managed Security Services.

DarkOwl

DarkOwl

DarkOwl provides the world’s largest index of darknet content and the tools to efficiently find leaked or otherwise compromised sensitive data.

Area 1 Security

Area 1 Security

Area 1 is the only Pay-per-Phish solution in cyber security. And the only technology that blocks phishing attacks before they damage your business.

Risk Ledger

Risk Ledger

Risk Ledger is improving the security of the global supply chain ecosystem, reducing the number of data breaches experienced through supply chain attacks by companies and consumers alike.

Digital Beachhead

Digital Beachhead

Digital Beachhead has the expertise to provide a range of Cyber Risk Management and other Professional Services with specifically tailored solutions at competitive prices.

Edgile

Edgile

Edgile is the trusted cyber risk and regulatory compliance partner to the world’s leading organizations, providing consulting, managed services, and harmonized regulatory content.

Appurity

Appurity

Appurity specialises in mobile and application security, delivering comprehensive solutions across all verticals.

Factmata

Factmata

Factmata is an social and news media monitoring and analytics product that uses AI to identify and track narratives online, highlighting those most likely to cause brand harm or misinform the public.

SilverEdge Government Solutions

SilverEdge Government Solutions

SilverEdge is a next generation provider of innovative and proprietary cybersecurity, software, and intelligence solutions for the Defense and Intelligence Communities.

OneZero Solutions

OneZero Solutions

OneZero specialize in cybersecurity operations, information assurance, computer network operations, solutions engineering, and project management.

SecAI

SecAI

SecAI is an innovative threat intelligence-driven, and AI-powered vendor aiming at cyber threat detection and response.

Scinary Cybersecurity

Scinary Cybersecurity

Scinary was founded in 2015 on the premise that cybersecurity should not be limited to just large corporations or large government entities.