Business Case Study

The importance of strengthening security resource
development at the field level from the perspectiveof Security by Design
Value and Career Paths provided by the CompTIA certification programs
TARGET

Business Divisions Security Officers

Background of Efforts

SoftBank Corp.
Tokyo Portcity Takeshiba Office Tower

1-7-1 Kaigan, Minato-ku,
Tokyo
http://www.softbank.jp/en/

What is Security by Design adopted by SoftBank?
Security by Design is a development approach to incorporate security design from the upstream process
stage such as "planning" and "design." This reduces costs significantly and enhances maintainability
when compared to the legacy method that incorporates security in an "operation" process.
Challenges and Solution
Challenges during the effort included a large number of cases involved with the security team and theburden of risk acceptance. Therefore, it was necessary to establish a structure enabling approval work ineach business division while the security team provided support and required an urgent need fordeveloping security officers who could perform such work.

“Security+ should be the firstcertification to pursue forthose involved in cybersecurity.”
Mr. Satoshi Hinago,
Technical Meister,Technology Administration
Division

Certification in USE■ CompTIA Security+■ CompTIA CySA+■ CompTIA PenTest+

CompTIA Cybersecurity certifications
CompTIA Security+
designates knowledgeable
professionals in the field ofsecurity. The exam covers themost important foundational
principles for securing anetwork and managing risk.

CompTIA CySA+ evaluates the knowledge
and skills required to understand threat
detection tools and identify organizational
vulnerabilities, threats and risks.
CompTIA PenTest+ assesses the most upto-date penetration testing, andvulnerability assessment and management
skills necessary to determine the resiliencyof the network against attacks.

ACTIONAs a part of Security by Design effort, aiming todevelop about 600 professionals in business processes.
✓ Mandatory certification acquisition
All CSIRT members are expected to be
CompTIA Security+ certified.

CompTIAWORLDWIDEHEADQUARTERS
CompTIA Certifications, LLC
3500 Lacey Road, Suite 100
Downers Grove, IL
60515-5439
CompTIA.org✓ Promoting certifications by career
For example, CompTIA Security+ is to be pursued
when deployed in the security division. Furthercertification is suggested according to individual’s
career path.
✓ Trusted and industry recognized certifications
Many CompTIA certifications including Security+
are ISO 17024 compliant. US DoD 8140/8570.01-M
approved.
✓ Motivation for engagement
Grants of special allowances, training, accessauthority, and consulting is considered.
*Information Security Committee“Security+ comprehensively covers and serves as proof of basic cybersecurity
knowledge. It is a qualification acting as a license for getting started incybersecurity.” Mr. Satoshi Hinago, Technical Meister*As of Jan 2021
@2021 CompTIA Properties, LLC, used under license by CompTIA Certifications, LLC. All rights reserved. All certification programs and education related to such programs are operated exclusively by CompTIA Certifications,LLC. CompTIA is a registered trademark of CompTIA Properties, LLC in the U.S. and internationally. Other brands and company names mentioned herein may be trademarks or service marks of CompTIA Properties, LLC orof their respective owners. Reproduction or dissemination prohibited without written consent of CompTIA Properties, LLC. Printed in the U.S. 05626-Aug2018

Ver.2