cannot notice such incidents. Also, cloud services have such characteristics that most of their users may face the same incidents at the same time. To help government agencies and critical infrastructure operators, as cloud service users, safely and securely entrust their information assets to cloud services, the national government will facilitate drawing up a set of rules and guidance, which the users take into consideration when they design and develop information systems based on cloud services, in cooperation with the users, cloud service providers and system integrators, etc. To this end, users can choose the cloud services suited to their own risk management principles and certainly understand the cloud services’ security policies and the demarcation point of responsibility. Moreover, such an environment can be created that they can appropriately deal with problems when users, providers and system integrators fail to understand each other. In parallel, the national government will broadly expand its work to visualize cloud services’ safety from the government agencies to private sectors, by using the Information system Security Management and Assessment Program (ISMAP) and other similar initiatives, as well as promote global collaboration as many cloud services are provided by foreign companies. - As for services used by many public institutions, companies, and individuals, we will promote cybersecurity measures including further supply chain management, considering their role as a social platform. (3) Addressing cyber crimes - In light of the fact that cyberspace is evolving to become a public space where all stakeholders are involved, the national government shall continue to push forward with the disclosure of criminals, who exploit cyberspace, and malicious business operators, who provide criminal infrastructure hindering traceability, with the aim of ensuring safety and security on the same level as in physical space. - The national government will also prevent cyberspace from becoming a criminal infrastructure through public and private sector collaboration, leveraging information about infrastructure and technologies that are at high risk of being used to commit a crime as revealed through criminal investigations, and engaging with relevant business operators. - The national government will also strengthen efforts such as cooperation with relevant business operators and international collaboration in order to remove environments and causes that tolerate the current asymmetric situation with attackers. (4) Deploying comprehensive cyber defense - In order to set up defenses against serious cyberattacks that undermine the safety and security of key assets such as the critical socio-economic infrastructure and lifeline, the national government will address in corporation with the relevant organizations, threat hunting, 19