NRIセキュアテクノロジーズ Company Profile

In recent years, in addition to cyberattacks targeting individual companies, there has been an increase in cyber incidents originating from third parties such as contractors and business partners. The impact of these incidents can often lead to a chain reaction resulting in business interruptions, information leaks, and brand damage, even without direct attacks on the company itself. Amidst this situation, we have received many inquiries from risk management and information security departments regarding: - Understanding the necessity of managing security risks of contractors, but lacking the capacity to do so - Having checklists and questionnaires, but updates and judgments are becoming overly reliant on individuals - Wanting to improve collaboration between contractors and responsible departments In this seminar, we will discuss the latest trends in supply chain risks for those in risk management and information security departments, explaining the importance of third-party risk management and key points for effective systematization. [Speaker] Tatsuya Seto, NRI Secure Technologies [Target Audience] - Personnel from risk management departments - Personnel from information security departments, CSIRT, and information systems departments - Individuals responsible for managing contractors and business partners - Personnel promoting supply chain risk management (TPRM)

In recent years, the advancement of digital technology has significantly increased the value of utilizing PII (Personally Identifiable Information) in businesses. However, improper management or leakage of PII can lead to serious risks directly affecting business continuity, such as compensation claims, administrative sanctions, and loss of trust. Companies are strongly urged to establish effective personal information management systems, and there have been successive reviews of personal information-related laws and guidelines both domestically and internationally. Amidst this, there is growing attention to ISO/IEC 27701 (PIMS certification) as an international framework for PII management. ISO/IEC 27701 will undergo a major revision in October 2025, the first in six years, with significant changes to the positioning and structure of the standard, refreshing its content to align with modern privacy protection. Companies that have already obtained certification have until October 31, 2028, to transition from the old version, making timely action essential. This seminar will explain the overview of ISO/IEC 27701, key points of the revision, and practical points for obtaining and renewing certification based on the old and new standards.

Amid the increasing demand for improved security standards across the entire supply chain, the Ministry of Economy, Trade and Industry is attracting attention with its "Supply Chain Measures Evaluation System," which is scheduled to begin operations in the second half of 2026. This system serves as a new standard for companies reviewing their management of business partners and governance of subcontractors. Based on data analysis from approximately 1,300 companies, we will outline four common challenges faced by businesses and introduce a phased approach toward achieving ★4 certification. <Session 1> Concrete Path to Achieving ★4 Certification – Four Challenges and a Phased Approach Revealed by Data Analysis of 1,300 Companies Speaker: Seiya Nakaki, NRI Secure Technologies <Session 2> Realizing Visualization and Continuous Management of Supply Chain Risks with SecureSkeCH – Also Compatible with the Ministry of Economy's Supply Chain Measures Evaluation System Speaker: Tatsuya Seto, NRI Secure Technologies 【Target Audience】 - Those who want to grasp the overview of the Supply Chain Measures Evaluation System and tips for compliance. - Those aiming to build a continuous management system with an eye on obtaining ★4 certification and subsequent operations. - Those in the position of clients who wish to review the subcontractor management process.