Pre-Tokyo 2020 Games Risk Management Effort Result *As of the End of May 2021 Promotion of risk management ○ Number of organizations that carried out self-RA RA 1: 75 → RA 2: 115 → RA 3: 191 (Oct.–Dec. 2016) (Aug.–Oct. 2017) (Jun.–Aug. 2018) → RA 4: 273 (Feb.–Apr. 2019) → RA 5: 279 (Sept.–Dec. 2019) ○ Explanatory meetings In 10 prefectures, 53 meetings were held, and a total of about 2,000 individuals participated. ○ State of cybersecurity measure implementation • It was confirmed that more RA led to better risk management measure implementation status (see the figure on the right). • The organizations that participated in RA from RA 1 seemed to have carried out their own exercises and training after each round of assessment to prepare for the Games and considered corrective measures. ○ Study sessions for sports associations The NISC held 17 study sessions and a total of about 500 individuals attended. → RA 6: 270 (Nov. 2020–Jan. 2021) State of cybersecurity measure implementation (RA 6) ⑩ ⑨ 100 80 60 40 20 0 ① ② Plan ③ ⑧ ④ ⑦ ⑤ Do Check Act ① ② ③ ④ ⑤ ⑥ ⑦ ⑧ ⑨ ⑩ Formulation of the basic policy 基本方針の策定 Creation of internal documents 内規等の策定 Creation of a plan for measures 対策の計画策定 Holding of training 研修実施 Strengthening of internal control 内部統制の強化 Creation of a contingency plan コンティンジェンシープラン策定 Creation of a business continuity plan 事業継続計画の策定 Holding of exercises and training 演習・訓練の実施 Auditing 監査の実施 Examination of measures that need correction 是正すべき対策の検討 Overall 全体 Organizations that participated in RA from 第1回からの実施組織 RA 1 （今回） ⑥ Preparation of an incident response system (e.g., creation of the Cyber Security Incident Response Coordination Center) ○ The number of participants in the information sharing scheme Member organizations: 353 (Breakdown: 153 important ESPs, 40 sponsors, 67 sports associations, 30 relevant ministries, and 63 other organizations) The number of participating individuals: 3,944 Threat information reports ○ The number of participants in drills to prepare for the Games (four times by May 2021*) Total number of organizations that participated: 512 (Breakdown: 140 in the 1st drill, 149 in the 2nd drill, 108 in the 3rd drill, and 115 in the 4th drill) *The 5th drill was carried out in June. ○ Threat information reports The cumulative number of reports: 1,844 (Breakdown: 1,044 from the Cyber Security Incident Response Coordination Center and 800 from cooperating vendors (see the figure on the right) ○ Use of the JISP (as of the end of May 2021) The cumulative number of logins: 175,000; views: 443,000; posts: 7,000; and comments: 29,000 (Monthly average logins: 6,722; views: 17,020; posts: 277; comments: 1,106) Copyright(c) National center of Incident readiness and Strategy for Cybersecurity End of February 2020 End of May 2020 End of August 2020 Information provided (e.g., cooperating vendors) Cumulative times of information provision (April 2019–May 2021) End of November 2020 End of February 2021 End of May 2021 Information provided (Cyber Security Incident Response Coordination Center) 5