NRIセキュアテクノロジーズ List of News Articles

In recent years, in addition to cyberattacks targeting individual companies, there has been an increase in cyber incidents originating from third parties such as contractors and business partners. The impact of these incidents can often lead to a chain reaction resulting in business interruptions, information leaks, and brand damage, even without direct attacks on the company itself. Amidst this situation, we have received many inquiries from risk management and information security departments regarding: - Understanding the necessity of managing security risks of contractors, but lacking the capacity to do so - Having checklists and questionnaires, but updates and judgments are becoming overly reliant on individuals - Wanting to improve collaboration between contractors and responsible departments In this seminar, we will discuss the latest trends in supply chain risks for those in risk management and information security departments, explaining the importance of third-party risk management and key points for effective systematization. [Speaker] Tatsuya Seto, NRI Secure Technologies [Target Audience] - Personnel from risk management departments - Personnel from information security departments, CSIRT, and information systems departments - Individuals responsible for managing contractors and business partners - Personnel promoting supply chain risk management (TPRM)

In recent years, the advancement of digital technology has significantly increased the value of utilizing PII (Personally Identifiable Information) in businesses. However, improper management or leakage of PII can lead to serious risks directly affecting business continuity, such as compensation claims, administrative sanctions, and loss of trust. Companies are strongly urged to establish effective personal information management systems, and there have been successive reviews of personal information-related laws and guidelines both domestically and internationally. Amidst this, there is growing attention to ISO/IEC 27701 (PIMS certification) as an international framework for PII management. ISO/IEC 27701 will undergo a major revision in October 2025, the first in six years, with significant changes to the positioning and structure of the standard, refreshing its content to align with modern privacy protection. Companies that have already obtained certification have until October 31, 2028, to transition from the old version, making timely action essential. This seminar will explain the overview of ISO/IEC 27701, key points of the revision, and practical points for obtaining and renewing certification based on the old and new standards.