Previous 7 / 73 Next

I. Introduction 2. Envisaged Future 2. Envisaged Future The future images expected to be realized through the initiatives based on this Cybersecurity Policy are set out hereunder. (Clarification of responsibilities) ○ The purpose of CIP, the responsibilities of each stakeholder, and the items to be implemented are clarified and disseminated to all stakeholders as a common understanding. (Organizational governance) ○ Organizational governance functions fully in order to clarify responsibilities and authorities within organizational units, allocate resources appropriately, and accurately implement PDCA cycles so as to ensure that in response to environmental changes the purpose of CIP can be achieved at all times by all organizational units. (Ensuring optimal protection measures within the organization of each CI operator) ○ Based on the characteristics of the organization and the CISs provided, top management clarifies risks and make all persons within the organization aware of them. ○ Requirements relating to the continuous provision of CISs are clear, with standards and manuals formulated and maintained accordingly, with the status of compliance by related persons being readily assessable. (Comprehensive measures in response to threats) ○ In order to respond precisely to changes to CI-related threats, measures are promoted for a comprehensive response capable of anticipating future changes in the environment, including the supply chain, etc. (Communication) ○ Daily communications is conducted within each organization and among stakeholders in order to enhance measures to prevent CISs outages. In addition, in the event that CISs outages occur, thorough communication will ensure a calm response, and continued improvements will be made, leveraging experiences and applying them to future measures. (Coexistence and co-prosperity with society) ○ Independent and proactive measures by all stakeholders contribute to nurturing a cybersecurityfocused culture and also support sustainable development of society. ○ In addition to CISs being continually provided, stakeholders work together to ensure that CIP measures are well publicized nationally and provide the public with a sense of security. (Regular assessment and revision) ○ In addition to the measures of all stakeholders being regularly assessed, the policy will be revised 2

Select target paragraph3

● ● ●

The Cybersecurity Policy for Critical Infrastructure Protection

Document

State

Japan

Type of Document (for States): Strategy Documents: Other Strategy Documents

Topics

Critical Infrastructure
Cyber Crime
Cyber Terrorism
Cybersecurity Awareness
Cybersecurity Exercises
Economy and Finance
Incident and Emergency Response
International Cooperation
National Cyber Defense
Public-Private Partnership
Risk Mitigation and Management
Sustainable Development
Training and Education

United Nations Regional Group

Asia-Pacific States

Issuing Body

Summary

The government established the Cybersecurity Policy for Critical Infrastructures Protection, a shared policy between the government, which bears responsibility for promoting independent measures by CI operators relating to CI cybersecurity and implementing other necessary measures, and CI operators, which independently carry out relevant protective measures, as a basic framework for CI protection, and has promoted this initiative to date.
Purpose of CIP
- Based on the concept of mission assurance, the purpose of CI protection (CIP) is to maintain safe and continuous provision of CISs. Taking the view that natural disasters, mismanagement, cyberattacks, and changes in the environment surrounding CI constitute risks that make the continuous provision of CISs uncertain, the aim is to ensure resilience and prevent serious impact on national life and socioeconomic activities, from the dual aspects of limiting risk to acceptable levels, and in terms of preparing for CISs outages, taking appropriate action in the event of outages, and ensuring rapid restoration of services.
Responsibilities of stakeholders
- Responsibilities of stakeholders are based on the Basic Act on Cybersecurity (Act No. 104 of 2014).
- The national government is responsible for formulating and implementing comprehensive cybersecurity policies.
- Local governments bear the responsibility to formulate and implement independent cybersecurity policies.
- CI operators(excl. related entities) bear the responsibility to deepen their interest in and understanding of the importance of cybersecurity and to endeavor independently and actively to ensure cybersecurity, in order to stably and properly provide its services.
- Cyberspace-related business entities and other business entities shall endeavor independently and actively to ensure cybersecurity in the course of their business activities.
The Policy has been formulated based on the Cybersecurity Strategy formulated pursuant to the stipulations of Article 12 of the Basic Act on Cybersecurity (Act No. 104 of 2014), and also based on the stipulations of Article 14 (Ensuring Cybersecurity at Critical Social Infrastructure Providers and Other Related Entities) and Article 26, Paragraph 1, Item 5 (Functions under Jurisdiction of the Cybersecurity Strategic Headquarters) of the Act.

Source Link 1: https://www.nisc.go.jp/eng/index.htm

Source Link 2: https://www.nisc.go.jp/eng/pdf/cip_policy_2022_eng.pdf

Year Published: 2022

Date Published: Jun 17, 2022

Document Language(s)

English

Preview

Map

Latitude: 36.204824

Longitude: 138.252924

Map (linked Document): Japan

Primary Documents

2022_Japan_en_The Cybersecurity Policy for Critical Infrastructure Protection.pdf
English
Download View

UNIDIR Cyber Policy Portal Database

Select target paragraph3

The Cybersecurity Policy for Critical Infrastructure Protection

Primary Documents

Notifications