cyberspace which is compose of complex IT systems and where various socio-economic activities are interconnected. - With the deepening of the interconnection and interrelationship between stakeholders across the boundaries of cyberspace and physical space, there is a risk that the impact of incidents will extend over a wide area and cause more damage than expected. For this reason, the national government will encourage all service providers in cyberspace to ensure safety and security with a broad view of entire supply chains, focusing not only on the immediate users but also on the users who exist further downstream. - As for protecting the critical socio-economic infrastructure, the basic requirement will be for relevant stakeholders to ensure confidentiality, availability, and integrity according to their respective roles. However, given the changing nature of cyberspace as discussed above, it will become more and more difficult to achieve this goal only by means of self-help and mutual help. As such, the national government will work together with various stakeholders, take the attackers’ viewpoints into account as well, and use all means available to implement comprehensive cyber defenses, thereby working energetically to reduce risks and increase resilience for the entire country. - The personal information of the people and information concerning intellectual property, which is a source of international competitiveness, are important assets that the national government must protect. As cyberattacks that steal these types of information compromise the safety and security of the people and injure fair economic transactions, the national government will take comprehensive measures to protect those assets against cyberattacks from a perspective of economic security. (1) Building a safe and secure cyber environment for users - The national government will work together with relevant stakeholders and pursue various initiatives to create an environment where the stakeholders can choose appropriate risk management options suited to their needs, thereby contributing to enhanced risk management based on self-help and mutual help. As an example, we will work to increase the traceability and visibility of cyberspace through an integrated approach that encompasses both public and private sectors, while ensuring the confidentiality and privacy of communication. (i) Establishing supply chain management grounded in cybersecurity - To undertake necessary supply chain measures that include risk management from a perspective of supply chains, the government will promote efforts to develop and implement concrete security measures in the industry. This will be achieved through the formulation of both industry-specific and cross-industry guidelines based on a framework for security measures that cover both cyberspace and physical space. 17