Japan’s Financial Services Agency today publishes its Guidelines on Cybersecurity in the Financial Sector, effective immediately.
Key points
- Governance and risk-based cyber security controls.
- Third-party and supply-chain risk.
- Vulnerability management and testing, including threat-led penetration testing.
- Incident response, recovery and information sharing.
UK technology providers serving Japanese financial institutions should expect these guidelines to shape security assessments. The guidelines reflect international practice, including G7 fundamental elements and the NIST Cybersecurity Framework, so suppliers with ISO/IEC 27001 certification and mature incident response will be well placed. Expect questions on supply-chain risk and threat-led testing.
Source: Guidelines on Cybersecurity for the Financial Sector (Japan FSA)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
