Business Case Study

Even for user companies, it is indispensable to provide an
opportunity to systematically learn information security, and toclearly indicate the career paths for team members and even foroutsourced companies who are engaged in cyber security works.
Foster team members capable of responding to incidents surrounding network
infrastructure and cloud environment, and adopt global certification as essential
knowledge of CSIRT operations.
TARGET

Security Team (ASICS-CSIRT)
Outsourced Companies

Background of Efforts

ASICS Corporation
1-1,Minatojima-Nakamachi
Chuo-ku,Kobe
650-8555
078-303-2231www.asics.com“We adopt the global

certification necessary
for fostering information
security human resources,
foreseeing the future of
our company.
In order to develop
information security
human resources forour company, a necessary
curriculum is what istrusted as a world-widecertification.”

IT Division
Security Lead
CompTIA Cybersecurity
Analyst (CySA+) SME
Mr. Shigekazu Tanimoto

To Security Team, Adopted CompTIA Security+
To Outsourced Companies, Adopted CompTIA CySA+CompTIA CySA+ evaluates the knowledge and skills
required to understand threat detection tools and identifyorganizational vulnerabilities, threats and risks.
CompTIA Security+ is positioned as the higher certification.

ACTIONThe skill knowledge obtained with CompTIA CySA+ is utilized in the following areas:

Attempts at ASICS-CSIRT
1.

Certification in USE■ CompTIA Security+■ CompTIA CySA+
2.

CompTIAWORLDWIDEHEADQUARTERS
CompTIA Certifications, LLC
3500 Lacey Road, Suite 100
Downers Grove, IL
60515-5439
CompTIA.org

3.

Post-response Services(1) Incident Handling: Classification of Severity (Emergency, Warning, Attention, Information)
and Risk Prioritization(2) Incident Response: Information Exchange with Other Domestic Teams, Collaboration,Reporting and Coordination with Related Organizations (Local Police)(3) Vulnerability Management: Vulnerability Investigation for Our Servers/PCs, and Security
Audit with Hacking Methods
Pre-Response Services(1) Announcement: Implement Warnings and Attention to Cyber Attack Based on Threat Report(2) Attention and Warning/Notification: Based on the OSINT Info, Collect Information on Cyber
Attacks and Share within the Organization(3) Monitoring: Implement Monitoring Regarding Communications of Monitored Object,
Unauthorized Intrusion and Related Activities
Incident Management Services(1) Risk Management: Conduct Risk Analysis and Assessment (Impact Assessment) onInformation Assets(2) Cyber Security Awareness Improvement: Conduct Awareness Training on Information Security(3) Security Audit (Assessment): Conduct Penetration Test on Our Service Target“I took CySA+ exam because the certification can objectively prove the skills obtained fromsecurity investigations and CSIRT activities, and it also can secure future business. In addition,
through the CySA+ exam studies, I was able to organize the knowledge that I had cultivatedwith my past career and deepen my understanding.”

Kobe Digital Labo Inc. Mr. Iijima
Service Promotion, Security Business Division
Security Operation Support Team and KDL-SIRT“Until then I failed to measure my skill level though I worked as a security analyst; so I took theCySA+ exam. Through the process of passing CySA+ exam, I was able to organize essential
knowledge. The exam was a useful test not only to measure but also to improve my skill level
because I was able to have pseudo-experience on the response to situations that may occur inactual job.”
Kobe Digital Labo Inc. Mr. Umezu
Service Promotion, Security Business Division
Security Operation Support Team※All company, product, and qualification names are trademarks and registered trademarks of each company.
Ver.2© 2019 CompTIA Properties, LLC, used under license by CompTIA Certifications, LLC. All rights reserved.
Quotation or reproduction without permission is strictly prohibited. All certification programs and related education are operated exclusively by CompTIA Certifications, LLC. CompTIA is a registered trademark of International CompTIA Properties, LLC in the United States as well asother countries and regions. Other brand and company names mentioned here may be CompTIA Properties, LLC or trademarks or service marks of each owner. Duplication and distribution without the prior written consent of CompTIA Properties, LLC is prohibited.