- The national government will strengthen the protection of international submarine cables with international and public-private cooperation by ensuring safety, trustworthiness and redundancy. - The national government will advance efforts to assure trustworthiness of IT devices and services through international collaboration including standardization, and establishing technical verification mechanism. The national government will enhance trustworthiness of IT devices and services procured by government taking supply chain risk into account. 4. 2. 2 Ensuring cybersecurity in close cooperation with digital transformation led by the Digital Agency - To realize “people-friendly digitalization, with no one left behind,” it is necessary to thoroughly improve usability from the people’s perspective while also ensuring cybersecurity. For this reason, the basic principle for cybersecurity will be proposed in the Digital Agency’s basic development and management principles (development policy) for the information systems of the national government, local governments, semi-public sector, etc. and will be implemented. - From the perspective of safe and secure data usage, the Digital Agency will govern the planning of ID systems which uniquely identify individuals and corporations (e.g., Social Security and Tax Numbers, corporate numbers) and systems which ensure the authenticity of information and its provider (e.g., electronic signatures, electronic commercial registration certificates), in joint collaboration with relevant ministries, reform them from the user’s viewpoint, and promote their utilization. - The national government implements the ISMAP system, which supports the realization of the cloud-by-default principle, will update the system on an ongoing basis in light of the implementation status, and encourages its use by the private sector as well. 4. 2. 3 Promotion of efforts by stakeholders which underpin the socio-economic infrastructure (1) (Government agencies, etc.) - Each government agency is conducting information security measures in conformity with the unified government security standards, while the national government is working to enhance the overall governmental security level through efforts including security audits based on the standards, CSIRT training as well as GSOC’s monitoring for malicious activities. Each government agency will strengthen security measures in every phase, including the development and building phases of information systems, as an essential aspect of digitalizing the entire society. - In particular, critical systems commonly used by the ministries will be maintained and operated by the Digital Agency on its own or jointly with each ministry, ensuring stable and continuous operation including security. - Facing new security risk which has been brought by the spread of remote work ascribed to COVID-19 and the introduction of cloud services, the national government will implement 21