Cybersecurity Policy in Japan- METI’s effort against cyber threat -METI
Cybersecurity Division

(Case) Ransomware ”WannaCry” running rampant
In May 2017, Worldwide cyber attacks have infected more than
230,000 computers in over 150 countries.
Japanese companies are also infected through the infected
foreign companies in supply chains.
ICS PC is also locked andproduction stops
SpreadSpreadScreen lock andpayment demand inBitcoin
Company abroad

Company in Japan
Spread infection out of the company
Once the malware intrudes into
an office, the infection is
exponentially spread via thevulnerability of Windows

Intrusion through Internet or WAN

1

(Case) Cyber Attacks to ICSs (Industrial Control Systems)
Cyber attacks to criticalinfrastructures in the US
10 % attacks
reached to ICSs

Ukrainian blackout in 2016
（CrashOverRide(Industryoyer)）

Illegal access【IT System】

Illegal softwarewriting【Critical Infrastructure】

IT Network
Network Intrusion
ITIntrusion【ICSs】

Illegal operationand shutdown(Source) NCCIC/ICS-CERT Year in Review FY2015
Homeland Security

Poweroutage2

Importance of supply chain cybersecurity
Attacks targeting weak points in supply-chain have seriously
increased and been getting sophisticated.
• One of the features of recent cyberattack is increasing number of attacks withintrusion from relatively weak security organizations in the supply-chain, suchas overseas branches and business partners.

Large Enterprises

SMEs

Supply Chain
3

Recent situation of inquiries related to cyber attacks
Since March 2020 under the Covid-19 pandemic, the number ofinquiries related to cyber incidents increased.
Especially, inquiries related to “Emotet” surgered.
Number of inquiries related to cyber incidents toJPCERT/CC (monthly)

Number of inquiries related to Emotet to IPA(accumulated)

Increase afterMar. 2020

Surge in
Sep. 2020

Increase fromthe end of 2019
※Data for Oct, Nov 2020 is tentative<JPCERT/CC>

<IPA>
4

The Cyber/Physical Security Framework (CPSF)～for value creation process in Society5.0’s supply-chain ～https://www.meti.go.jp/english/press/2019/0418_001.html“Society 5.0”, where cyber and physical spaces are highly integrated, enables
rather dynamic and flexible creation of supply chain, while facing with newrisks such as spreading attack points and increasing impact to physicalspace.
Published “Cyber-Physical Security Framework (CPSF) Ver1.0” on April 18,
2019, which outlines security measures against new risks in Society 5.0.
Three Layers Approach by CPSF
【Third Layer】
Connections
in Cyberspace【Second Layer】
Mutual connections
between Cyberspaceand Physical space【First Layer】
Connections
betweenorganizations

Six Elements Approach by CPSF
Organization

Components

Procedure

PeopleDataSystem

Concept of risk management in CPSF
1. Function of each Layer
2. Security Incident
3. Risk Source (Sorted by 6 elements)
4. Measure requirement
5. Countermeasure Example

International harmonization

Correspondence Tables with:• NIST Cybersecurity Framework• NIST SP800-171• ISO/IEC 27001 Annex A

5

Further discussions based on CPSF
Established six industry-specific sub working groups (SWG), anddeveloping CPSF based security guidelines.
Established three cross-sectoral task-forces (TF) for common challenges.
Study Group on Industrial Cybersecurity ＷＧ１Standard Model（CPSF）
Industry by Industry discussion『3 rd layer』 TF： TF for ensuring the trustworthiness

Building SWG
Electric Utility SWG• Revising the existing guideline

Defense SWG
Automotive SWG• Developed a guideline ver. 1.0

Smart Home SWG• Developed a guideline ver. 1.0

Space Industry SWG• Launched in January 2021.

・・・

Cross-sectoral SWG• Developed a guideline ver. 1.0

of 『Connection in cyber space』• Published the Outline of “New Data Management Methods andFramework to Promote Value Creation through Data (Tentative), andinvited public comment (July15-Oct11).

Software TF：

TF for software management to ensure
cyber-physical-security• Developed a practice collection for OSS management.
• Considering proof of concept for promote the use of SBOM.

TF for ensuring the trustworthiness of『2nd layer』 TF： 『Connection between cyber and physical』• Developed “IoT Security Safety Framework” for ensuring the trustworthinessbetween cyber space and physical space6Adoption of CPSF in sectoral security guidelines
CPSF is incorporated in some security guidelines, such as cross-sectoror specific sectors where the cybersecurity is a key to maintain theoperations.
Smart City Security Guidelines (Ver. 2.0) -- published by Ministryof Internal Affairs and Communications (MIC), in June 2021
ERAB(Energy Resource Aggregation Business) Cybersecurity
Guideline (ver. 2.0) --- published by Agency for Natural Resources
and Energy (ANRE), in December 2019

CPSF

Smart City

EnergyResource
Aggregation

7

“Cybersecurity Supporters” for SMEs in FY2019-2020
Local organizations, security companies, and insurance companies formed aconsortium to implement POCs structuring security measure support system for
SMEs (FY2019: 8 projects, FY 2020:15 projects).
Aimed to generate a simple security insurance service for SMEs by the private
sector through promotion of proactive measures by SMEs, awareness raising forSMEs, understanding actual situation of attacks and needs.

*Project Regions in FY2019（8 Regions in total, 1064 SMEs joined）：
1. Miyagi, Iwate, Fukushima, 2.Niigata, 3.Nagano, Gunma, Tochigi, Ibaraki, Saitama, 4. Kanagawa, 5. Ishikawa, Toyama, Fukui,
6. Aichi, 7. Osaka, Kyoto, Hyogo, 8. Hiroshima, Yamaguchi

8Industrial Cyber Security Center of Excellence (ICSCoE)
Established in Apr. 2017. Provides one-year program for comprehensive study
on technology, management, and business.
48 trainees in 5 th year of “Core HR Development Program” from Jul. 2021.
Intensive training throughout year.
From companies such as Electric power, Oil, Gas, Chemicals, Automobiles, Railways.
（Number of Trainees: 1st Year：76、 2 nd Year：83、 3 rd Year：69、 4 th Year：46、 5 th year: 48）

Annual Schedule

Aug. Sep.
July
Primary (BasicKnowledge Review）

Oct.

Mar. April
Advance(Advanced Exercise）

May June
FinalProject

Open
ing

Business/Management/Ethics
Professional Networking（including overseas）

Closing

Jan.
Nov. Dec.
Basic（Basic Exercise）〇 Foster specialists for IT and OT〇 Plan measures by utilizing mock-up plants〇 Assess the security and reliability of ICS〇 Investigate and analyze cyber attacks

Feb.

Cultivate leadersof industrial
cybersecurity

Programs in cooperation with overseas partners.

Extensive hands-on training 301
conducted by DHS

Lectures, exchange opinionswith government, industry andstart-up companies

Exchange opinions with security
experts from government andindustry, visit to research institutions

ICSCoE (Akihabara Campus)

Simulated Plants

Entrance

Active Learning Room

10

ICSCoE (Bunkyo Campus)

Entrance

Active Learning Room B

Active Learning Room A

Lecture Room11

JP-US-EU ICS Cybersecurity Week for the Indo-Pacific Region
METI and ICSCoE, in collaboration with the government of the United States (DHS/CISA,DOS and DOE) and the European Commission (DG CONNECT), hosted JP-US-EU
Industrial Control Systems (ICS) Cybersecurity Week.
■ Date：October 25-29, 2021, Online■ Participants：40 Participants from power/oil/gas companies, National CSIRTs, relevant ministries in the IndoPacific Region (ASEAN member states, India, Bangladesh, Sri Lanka, Mongolia and Taiwan) + Audience wereinvited to the seminar part. Trainees and graduates from the Core Human Resource Development Programprovided by ICSCoE joined some sessions as well.
■ Contents：Remote hands-on training by ICSCoE, ICS cybersecurity seminars by experts from Japan, the U.S.,
and the EU, Workshops regarding risk assessment/ workforce development by INL and ICSCoE.
<Remote Hands-on Training><Opening Remarks>

Mr. HOSODA KenichiState Minister of Economy, Tradeand Industry

Mr. Eric GOLDSTEIN
Executive Assistant Director for
Cybersecurity, CISA

Joint Outreach

Ms. Lorena BOIX ALONSO
Director, DG CONNECT

Mr. Raymond F. GREENE
Chargé d’Affaires ad interim
U.S. Embassy Tokyo

Indo-Pacific Region

12