handling incidents and taking preventive policy measures in an integrated manner by using all means and capabilities available as a national government. (i) The national government will advance efforts to enhance the functions of national CERTs (CSIRT), beef up response capabilities by marshalling and coordinating the resources of responsible government agencies, and collaborate with information sharing organizations including the Cybersecurity Council and the Cybersecurity Response and Coordination Center. This will ensure that collaboration and coordination with external parties, collection and analysis of information, investigations, issuing alerts, formulating countermeasures and responses, and taking preventive policy measures will be implemented seamlessly and effectively, thereby enabling an active and exhaustive response as a nation. (ii) The national government will work together and discuss measures concerning “Active Cyber Defense” including vulnerability handling, technical verification mechanism, and proper and timely damage announcements, as well as establishing functions for investigating the cause of relevant industrial control system incidents. (5) Ensuring trustworthiness of cyberspace - Given that many of the cyberattacks currently recognized target the personal information and intellectual property information which is a source of international competitiveness, the national government will take comprehensive protective measures against cyberattacks from a perspective of economic security. (i) Efforts to support stakeholders that possess the personal information of the people and information concerning intellectual property - We will seek thorough implementation of countermeasures by providing timely and appropriate information about effective safety management measures that protect personal information from cyberattacks. - The national government will strengthen efforts in corporation with relevant organizations to promote information sharing by private companies, universities, and other actors that possess or manage the personal information of the people and information concerning intellectual property. (ii) Ensuring trustworthiness of IT systems and services from the perspective of economic security - The national government will advance measures to ensure the trustworthiness of IT systems and services that are embedded in critical socio-economic infrastructure with a major impact on our people’s lives and economic and social activities, examining various risk scenario including supply chain risks as well. 20