Japan’s New Cyber Security Strategy

Japan has recently issued the outline for its ‘Next Cyber Strategy’ which is likely to be approved by Cabinet in September 2021. Importantly, this is the first time that Japan has mentioned any country that is posing threat to Japan’s national security - that country is China.

The strategy is intended to run for three years and has been prepared in the backdrop of increasing cyber attacks from China and deteriorating relations with that country on the issue of Taiwan

Japan has also gradually integrated cyber security into boosting its relations in the ASEAN region, offering platforms for collaboration with individual Southeast Asian countries as well as the United States through additional coordination. Japan’s relations with Russia are also deteriorating and Japan perceives that Russia was also responsible for cyber attacks on Japan’s critical infrastructures.

The new national strategy has been formalised after soliciting public comment and states that China is believed to be conducting cyber attacks to steal information from firms linked to the military and others with advanced technologies, while Russia is suspected of carrying them out with military and political purposes.The strategy has been finalised by the special task force on cybersecurity strategies headed by Chief Cabinet Secretary, Katsunobu Kato. He had instructed the members to “enhance defence, deterrence and assessment capabilities and strengthen cooperation among relevant bodies to protect security interests.” 

Realising that cyberspace has become a foundation of social and economic activity, it commits to establish a Digital Agency with the aim of achieving “people-friendly digitalisation, with no-one left behind.” In the external environment, it observes the growing interstate competition in the spheres of politics, economy, military affairs, and technology causing geopolitical tensions, even during normal times. 

The outline states that circumstances surrounding cyberspace have taken on an appearance that is neither peacetime nor wartime. On the nature of threats, it observes that there are increasing threats of organised and sophisticated cyber attacks, including those suspected of being state-sponsored, with the aim of service disruption of critical infrastructure, theft of personal information and intellectual property, and interference with democratic processes. It also observes that China, Russia and North Korea are building their cyber capabilities of their military and other institutions.

In 2014, Japan established the national Cybersecurity Strategic Headquarters reporting to the Cabinet for the purpose of effectively and comprehensively promoting cybersecurity policies. The Cybersecurity Strategic Headquarters is headed by the Chief Cabinet Secretary and comprises his deputy who is the Minister-in-charge of Cybersecurity, and other senior government Minister. This body closely coordinates with the National Security Council of Japan reflecting importance given to the cybersecurity in overall national strategy.

A year later in 2015, the National Centre of Incident Readiness and Strategy for Cybersecurity (NISC) was created by upgrading the National Information Security Centre, which was established in 2005. The NISC serves as the secretariat of the Cybersecurity Strategy Headquarters, working together with the public and private sectors on a variety of activities to create a “free, fair and secure cyberspace”. It functions as the focal point in coordinating intra-government collaboration and promoting partnerships between industry, academia, and public and private sectors. .

The Japanese strategy considers cyber security as value creation enabler for socio-economic vitality and sustained development as also an essential aspect for national security. 

  • It stresses on development of secured IoT system, protection of critical infrastructure through public -private partnership, creation of new effective information sharing and collaboration framework, enhancing security measures for national government, encouraging cyber security at academia and research institutes, and enhancing readiness for massive cyber-attack crisis and importantly taking proactive measures for cyber defence and combating cyber crime.
  • Japan places considerable importance to building a trustworthiness in value chains and decides to take appropriate steps in this direction. It states: “security products and services provided in the market must be trustworthy.” Japan emphasises the use of indigenous services and equipment. It plans to make inexpensive, effective, and accessible security services and simple insurance products widely available for SMEs.
  • Japan places greater emphasis on public awareness programme. It plans to advance “DX with Cybersecurity” (DX is a strategy of enabling business innovation predicated on the incorporation of digital technologies into your operational process, products, solutions, and customer interactions) as a society-wide effort to provide “Plus Security” knowledge to various human resources who may not necessarily have expertise or work experience related to IT or security, including management and executives, and ensure smooth collaboration with security experts both inside and outside the organization.
  • Data protection is an important priority: The personal information of the people and information concerning intellectual property, which is a source of international competitiveness, are important assets that the national government must protect. The vulnerabilities for data hosted on cloud has been focused and Japan commits to make people aware about it.
  • Japan commits to strengthen its defence capabilities by securing the nation’s resilience through enhanced capabilities of the Self Defence Forces and other government institutions. Japan also plans to enhance capabilities to detect, investigate, identify the attackers and deter. 
  • It commits support for ‘Free, Fair and Secure Cyberspace’, for strengthening capabilities of defence, deterrence and situational awareness and international cooperation and collaboration and would promote the rule of law in cyberspace. Japan along with others is pushing for strict international law for the governance of the cyberspace.

This strategy calls for enhancing deterrence through the Japan-US alliance by holding joint exercises of the Japanese Self-Defense Forces, US forces.ASEAN partners.

For economic security, this strategy focuses securing the safety of key infrastructure for overseas communications, including submarine communication cables, and creating safety and credibility standards for information technology devices.The strategy reflects the current perception of cyber threats and its ambition to develop a strong deterrent capability against its adversaries. The strategy also indicates growing confidence in dealing with its neighbours.

The Chinese Foreign Ministry has severely criticised Japan for the new cyber security strategy and spokesman  blamed Japan for “groundless slander” against China and Russia on cybersecurity.  He further stated that Japan bad relations with all its neighbours.

While Japan alone may not be able to counter Chinese cyber attacks, in coordination with US and others it can achieve the strategic equilibrium in cyberspace.  In this respect, it can play an important role in countering the forces that are creating instability in that region.   

Intelligence Online:        Bangkok Post:      Times of India:     IFRI:        Image:Unsplash

You Might Also Read:

IISS: Cyber Capabilities & National Power Rankings:

 

« Endpoint Security Is More Important Than Ever
New CSPM Report Highlights The Perceived Security Gap For Cloud Infrastructure »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

NATO Cooperative Cyber Defence Centre (CCDCOE)

NATO Cooperative Cyber Defence Centre (CCDCOE)

NATO CCDCOE's mission is to enhance the capability, cooperation and information sharing among NATO, NATO nations and partners in cyber defence.

NextLabs

NextLabs

NextLabs provides data-centric security software to protect business-critical data and applications.

CFC Underwriting

CFC Underwriting

CFC is a specialist insurance provider and a pioneer in emerging risk, including cyber insurance.

Omada

Omada

Omada is a leading provider of IT security solutions and services for identity management and access governance.

Bowbridge

Bowbridge

Bowbridge provides anti-virus and application security solutions for SAP systems.

The ai Corporation

The ai Corporation

The ai Enterprise Fraud Solution is an on-prem or cloud-based self-service, machine learning fraud detection and prevention tool set.

Level39 (L39)

Level39 (L39)

Level39 is the world's most connected tech community, with over 200 tech startups and scaleups based onsite.

DigiSec360

DigiSec360

DigiSec360 is a technology firm focused on the human element of cybersecurity.

Netragard

Netragard

Netragard has an established reputation for providing high-quality offensive and defensive security services.

VectorUSA

VectorUSA

VectorUSA is a premier technology solution provider. We design, build and maintain cybersecurity, data center, wireless and managed solutions – transforming business needs into technology solutions.

Regulativ.ai

Regulativ.ai

Regulativ.ai is an innovative and comprehensive platform, driven by AI, to address the regulatory and compliance needs of Cyber Security Regulatory compliance and reporting.

Advantio

Advantio

Advantio offers a unique combination of technologies and managed, advisory and testing services to increase your cyber resilience and compliance.

Halborn

Halborn

Elite blockchain cybersecurity. Award-winning ethical blockchain hackers to secure your stack end-to-end. Far beyond smart contracts.

Exceed Cybersecurity & I.T. Services

Exceed Cybersecurity & I.T. Services

Exceed Cybersecurity & I.T. Services is a premier Managed Internet Technology (I.T.) company with a focus in cybersecurity risk management and CMMC compliance management.

RealTyme

RealTyme

RealTyme is a secure communication and collaboration platform with privacy and human experience at its core.

Methods

Methods

Methods is the leading digital transformation partner for the UK public sector. We care deeply about making our public services better and have been doing this for over 28 years.