- In this way, it is important to promote digitalization along with efforts to ensure cybersecurity (“DX with Cybersecurity”). All stakeholders must pursue their initiatives with this understanding. As a nation, Japan will work to create a foundation that will serve as a basis for those initiatives and powerfully support moves to promote digitalization in other ways as well. (2) Ensuring the overall safety and security of cyberspace as it becomes increasingly public and interconnected - In past cybersecurity strategies, Japan encouraged public and private sector initiatives based on the three approaches of “mission assurance” of service providers,” “risk management,” and “participation, coordination, and collaboration” toward the sustainable development of cyberspace. - In an environment of increasing uncertainty due to growing threats in cyberspace, emergence of vulnerabilities, changes in Japan’s national security environment, and other factors, cyberspace must have the same level of safety and security as real space in order to be recognized as a public space. To this end, Japan must deepen and enhance all three approaches without overlooking the asymmetrical situation with the attackers, and work to improve the environment and address the causes. This requires all stakeholders involved in cyberspace to expect greater roles, and while independent efforts (“self-help”) and close coordination among multiple stakeholders (“mutual help”) continue to be important, Japan will continuously examine the role of each stakeholder, including the role of “public help” that serves as their foundation, and what to defend, and then enhance multi-layered approaches. At the same time, Japan will clarify the missions (functions) of national CERT8 (CSIRT), while improving and enhancing them through examination so that the missions will be thoroughly fulfilled. (i) Deepening “mission assurance” (ensuring trustworthiness of the entire value chain with a focus on securing delivery of services to end users) - Traditionally, the idea of “mission assurance” has been positioned as an approach for service providers to steadily perform operations that must be performed as a “mission,” with a focus on the direct users of services, in particular those under a contractual relationship. - In recent years, the popularization of cloud services and increased complexity of supply chains have led to the delivery of various services through cyberspace. With many players participating in supply chains and the reliance on cloud service providers increasing, it is becoming increasingly difficult for end users to see who is responsible for services and operations. It is also becoming difficult to foresee the impact and repercussions that will result in the event of an incident. Taking cloud services as an example, the impact may now extent not only to businesses that use them, but also to the end users who use the services of those 8 In the current strategy formulated in 2018, it is defined as "a coordinator / coordinator to deal with cyberattacks all in Japan together". Generally, CSIRT is an abbreviation for Computer Security Incident Response Team, and CERT is an abbreviation for Computer Emergency Response Team. 10