III. Policies for CIP 2. Enhancement of Information Sharing System 2. Enhancement of Information Sharing System While the social and technological environments surrounding CI and trends of cybersecurity are changing from moment to moment, individual CI operators' independent activities have limits in maintaining high security levels. Cross-sectoral efforts for information sharing in collaboration between the public and private sectors are indispensable. Broadly sharing information on attackers and resulting prompt countermeasures by a larger number of CI operators contribute not only to minimizing damage caused by the relevant attack but also to deterring further cyberattacks. Given such backdrop, efforts for smoother information sharing have been made under former Cybersecurity Policies and a certain outcome is observed in activated information sharing in some sectors, but information sharing among the entirety of the CI is not necessarily sufficient yet. Therefore, it is important to deepen understanding of the significance and necessity of such efforts and promote measures for activating information sharing continuously under this Cybersecurity Policy. The Japanese government basically considers that CI operators should assume the primary responsibility for cybersecurity measures and should mutually cooperate with other stakeholders voluntarily. Accordingly, the Cabinet Secretariat preferentially makes efforts to develop an environment to enable the public and private sectors to easily share information in a cross-sectoral manner. 2.1 Information sharing system during the term of this Cybersecurity Policy As many big international events, such as the Olympic and Paralympic games, are scheduled to be held in Japan, cyberattacks against CI are expected to be increased qualitatively and quantitatively and it is urgently necessary to develop an information sharing system among relevant entities promptly. The information sharing system built under the Third Policy has become fully rooted among stakeholders and therefore should be further developed and disseminated. The Cabinet Secretariat will consider means for improving the information sharing system and formulating new schemes as follows to enable CI operators to positively utilize shared information in their risk management and incident responses. Under the former information sharing system, CI operators were supposed to submit information to the Cabinet Secretariat via responsible ministries and this partially hindered activation of information sharing as CI operators were afraid of being subject to disciplinary guidance by government organizations as a result of reporting signs of incidents, Hiyari-Hatto events or system failures, for which reporting is not required under relevant laws. Therefore, this information sharing system is to be revised to newly introduce, in addition to the conventional means to have CI operators directly make reports to responsible ministries, a new route for information sharing via the CEPTOAR secretariat, which enables data anonymization, regarding events for which reporting is not required under relevant laws. CI operators will be able to select the means for reporting on their own, depending on the content, and this is expected to break down psychological barriers and prompt information sharing not legally required. Additionally, information will come to be gathered in each CEPTOAR secretariat and functions of CEPTOARs will be strengthened as each CEPTOAR will become able to spread gathered information promptly within each sector as necessary. 14