Cyber attacks are not IT incidents, but "management incidents."

If you wake up today, who will explain what and how?

Cyber attacks are no longer just an issue for the IT department. Business interruptions, impacts on partners, accountability, and loss of trust. Ultimately, what is questioned is the judgment of management. We have entered an era where it is no longer about "whether our company will be targeted," but rather "how we are perceived by our partners." The SCS evaluation system (Security Measures Evaluation System) was created as a "common yardstick" to visualize corporate security measures in this context. However, this system is not the goal. What is first needed is to clarify as management "what to protect, what to prioritize, and how much can be explained." In an era where it is difficult to protect everything, it becomes crucial to choose what to safeguard and create a state where it can be explained.

Other security