Business Case Study

Cybersecurity strategies in the manufacturing of
medical devices – importance of systematic learningand skills definition
Global certifications are requirements for CSIRT operations, laying the foundation forincident response teams around network infrastructure and the cloud environment
TARGET

Incident Response Teams (Sysmex-CSIRT）
Outsourcing contractors (SOC Tier1)

Background of Efforts

Sysmex Corporation
1-5-1 WakinohamaKaigandori,Chuo-ku, Kobe
www.sysmex.co.jp/en/“Currently, we are focusing
on redefining the service
level of outsourced
companies, acquiringspecialized knowledge on
cyber security, and masterthe skills and related
technologies necessary forincident responseoperations.
We would like to improve
the security level of theGroup by acquiring theglobally accepted CompTIA
certification.”
Sysmex-CSIRTMr. Shigekazu Tanimoto(DX strategy Development)

Since its establishment in 1968, Sysmex has been providing customers around the world with thesolutions that enable in vitro testing of blood and urine samples. In addition to the fields of hematology,
immunochemistry and hemostasis, the company has expanded business to include the life science
domain, and is now an integrated manufacturer, developing and manufacturing the instruments,
reagents and software that are needed for in vitro diagnostics and providing sales and support service,supporting human health in more than 190 countries and regions around the world.
As a healthcare company, quality ICT infrastructure as well as security in products and services
provided are extremely important. With the establishment of CSIRT, Sysmex strives to continuously
protect important information from cyber threats, including customers’ data and assets indispensable
to the business.
Having CSIRT teams composed of employees and outsourcing contractors with different experience, it
was challenging in how to improve incident handling performance and business maturity. The company
first redefined operations in CSIRT and SOC, clarifying execution criteria and tier of each role. They
defined SOC as a reactive function based on SLA. Utilization of globally recognized CompTIA
certifications was convincing when anticipating to deal with overseas sales companies.

CompTIA CySA+ and CompTIA PenTest+ for Tier1 requirements:
Monitoring teams to mandate security analytics skills, and diagnostic teams to mandate
penetration testing skills.
CompTIA CySA+ evaluates theknowledge and skills required tounderstand threat detection tools
and identify organizational
vulnerabilities, threats and risks.

CompTIA PenTest+ assesses themost up-to-date penetration testing,and vulnerability assessment andmanagement skills necessary todetermine the resiliency of thenetwork against attacks.

ACTION

Certification in USE■ CompTIA CySA+■ CompTIA PenTest+

CompTIAWORLDWIDEHEADQUARTERS
CompTIA Certifications, LLC
3500 Lacey Road, Suite 100
Downers Grove, IL
60515-5439CompTIA.org@2021 CompTIA Properties, LLC, used under license by CompTIA Certifications, LLC. All rights reserved. All certification programs and education related to such programs are operated exclusively by CompTIA Certifications,
LLC. CompTIA is a registered trademark of CompTIA Properties, LLC in the U.S. and internationally. Other brands and company names mentioned herein may be trademarks or service marks of CompTIA Properties, LLC orof their respective owners. Reproduction or dissemination prohibited without written consent of CompTIA Properties, LLC. Printed in the U.S. 05626-Aug2018

Ver.1