national security, including those possibly sponsored by states, utilizing political, economic, technological, legal, diplomatic, and all other viable and effective means and capabilities. - In this regard, it was confirmed in the Japan-US “2+2” in 2019 that a cyberattack could, in certain circumstances, constitute an armed attack for the purposes of Article V of the U.S.-Japan Security Treaty. In addition to employing capability to disrupt the opponent’s use of cyberspace for the attack, during attack against Japan, we will take due steps including the use of diplomatic means and criminal prosecution20. For example, investigations of a case in which the police sent an investigation report to prosecutors in April 2021 21 led to the conclusion that the Chinese People’s Liberation Army (PLA) was highly likely to be involved in the cyberattacks by a group with close links to the PLA against entities including Japanese companies. - Since cyberattacks have the risk of rapidly developing into graver situation, we will quickly respond to incidents by seamlessly transitioning to the escalation of situation from peacetime to large-scale cyberattacks and then to armed attacks. In addition, we will continue to maintain and strengthen the deterrence of Japan-US Alliance, in light of the outcome of the Japan-US “2+2” in March 2021. - The highly anonymous and covert nature of cyberspace has the risk of inadvertently heightening tensions among nations and aggravating the situation. Accordingly, it is important to establish an international communication channel from normal times as confidence building measures, in order to prevent accidental and unnecessary conflicts. (3) Strengthening cyber situational awareness capabilities - Situational awareness capabilities are the foundation of defense and deterrence capabilities. - To identify attackers and hold them accountable, we will continue to improve the ability to detect, investigate, and analyze cyberattacks, and advance efforts to further clarify the actual situation of cyberattacks, leveraging the nationwide networks and technical units of relevant agencies. - To address state-sponsored cyberattacks, we will advance information sharing among relevant ministries as well as with our ally and like-minded countries. 4. 3. 3 International cooperation and collaboration - In cyberspace, the impact of incidents can easily transcend national boundaries, and cyber incidents that occurred in other countries can easily affect Japan. Accordingly, it is important to engage in multi-layered cooperation and collaboration on various levels, including foreign governments and the private sector. 20 To date, we have issued a Press Secretary’s comment in 2017 criticizing North Korea’s involvement in WannaCry incidents, and in 2018 criticizing 21 A case in which the Metropolitan Police Department sent papers to the Tokyo District Public Prosecutors Office in April 2021, naming a Chinese cyberattacks launched by a group called “APT10,” which is based in China, working in collaboration with our allies and like-minded countries. Communist Party member as a suspect. In this case, it was concluded through investigations that the People’s Liberation Army unit 61419, which is based in Qingdao, Shandong Province, was likely to be behind a cyberattack group called “Tick,” which was suspected of launching a series of cyberattacks against approximately 200 Japanese companies. 30