JNSA’s Profile

Overview
Ø Org form
Ø EstablishedØ MembershipØ Annual fee

Non-profit Organization (NPO)
April, 2000 (Established as a voluntary association, and later

granted the status as a specified non-profit organization(NPO) in 2001.)

265 organization, majority are information security vendors
240,000 JPY

Ø Address

Minato-ku, Tokyo
Minani-Senba.Chuo-ku,Osaka-shi,Osaka (Western Japan office)Ø URL

http://www.jnsa.org/ (Japanese Page)
http://www.jnsa.org/en/（English Page)

The goal of NPO Japan Network Security Association (JNSA) is to solve
various problems in information security as well as to promote theawareness of information security through the collaboration ofinformation security community in order to contribute to the healthyadvancement of cyber society.
Copyright Japan Network Security AssociationOrganization and Activities
General Assemblyadvisor

Auditor8

Board of Directors

Committees
Committee

Western JapanOﬃce

Incident
Report,IoT etc
SocialActivities
Committee

Survey andResearchCommittee

Secretariat

Board of Secretaries

25
Working Groups

ISOG-J *2

ISEPA *1

JT2A *3

SECCON

Industry-Academia
Collaboration Council forInformation Security＊1 ： Information Security Education Providers Association＊2 ： Information Security Operation providers Group Japan＊3 ： Japan Trust Technology Association

ISO
proposal,KISIA
Standards
Investigation
Committee

Capacity Building
StudyCommission

Education
Committee

JNSA
InteractiveCommittee

MarketingCommittee

Each committees and oﬃce has various working groups to take care of designated activities.

Copyright Japan Network Security Association

Cybersecurity
Business
Compliance
Committee

U40
Committee

Products and services for overseas
We introduce JNSA Member Companies products and services information on our website.
Clickhttps://www.jnsa.org/en/activities/overseas/index.html

SecBoK(skillmap of security body of knowledge)
About 400 Skill items were identified with 16 roles

38

Knowledge on the company information security architecture system oforganizations

Knowledge on reporting principles, policies, procedures, and means (reporting300 format, report standard (example: requirements and priority)), practice of diffusion
and law enforcement agencies, and restrictions of intelligence965

Knowledge on approach for risk acceptance and/or risk management oforganizations¢ ¢ ¢¢¢¢¢¢¢¢¢¢¢¢ ¢¢¢¢¢¢¢¢ ¢¢¢¢¢¢¢¢ ¢¢ ¢ ¢ ¢¢ ¢ ¢¢ ¢¢¢ ¢ ¢Information Security Auditor

SecurityGovernance¢ ¢ ¢ ¢ ¢ ¢¢952 Knowledge on security problems, risks, and vulnerability that come to the surface
GeneralDescription¢¢ ¢ ¢ ¢ ¢ ¢ ¢ ¢¢ ¢Knowledge on external organizations and academic institutions relating to cybersecurity issues¢ ¢ ¢ ¢¢ ¢ ¢ ¢ ¢ ¢ ¢Knowledge on the meaning of researching technology of hardware, OS, and302
network320¢¢ ¢ ¢ ¢ ¢ ¢ ¢ ¢156 Skill regarding application of principles of confidentiality, integrity, and availability

ConsultantSkill items alittle lessthan 400¢ ¢Network Analyst

Knowledge on methods of the current industry that use concepts and capability
based on standards regarding the evaluation, implementation, and popularization
77of tools and procedures for security assessment, observation, detection, andimprovement of information technology

Investigator

Knowledge on security principles and methods of information technology(examples: firewall, demilitarized zone, and encryption)

Legal Adviser

70

Forensic Engineer

Knowledge on information assurance principles used for managing risks
regarding use, processing, accumulation, and transfer of information or data

Education/Enlightenment

55Solution Analyst

Knowledge on information assurance principles and organization requirements
regarding confidentiality, integrity, availability, authentication and non-repudiation

Vulnerability Examiner63¢

Curator64 Knowledge on principles of information security system engineering

Researcher

Minor Item

Commander/TriageGeneral
Description

KSA-ID

POC

Basics ofSecurity

Middle Item

Notification

Major Item

CISO

Field

Incident Management/Incident Handler

Mapping samples of skills and roles¢Copyright Japan Network Security Association
https://www.jnsa.org/en/reports/secbok.html

SECCON（Security Contest）

The biggest security contest in Japan is “SECCON”.
teamparticipant
country

2021
785
1,447
76

2020
982
1,862
88

Real time Visualization system （提供：情報通信研究機構）

In 2021, 785 teams from 76 countries
participated in the “SECCON 2021 onlinecontest”.

This year, the contest will be held
remotely on 12-13th November.
The final contest will be held inFebruary 2023 after 2 years.
https://www.seccon.jp/2022/
Copyright Japan Network Security AssociationＴｈａｎｋ ｙｏｕ