Cyber Security Cloud, Inc. (Headquarters: Shinagawa-ku, Tokyo; President and CEO: Toshihiro Koike; hereinafter referred to as "the Company") will release a "Cyber Disaster Prevention Kit(※2)" to coincide with Cyber Disaster Prevention Day(※1) on Monday, June 9th, which also happens to be "6 (Ro) 9 (Ku) Day." The kit is aimed at both businesses and consumers and contains basic information to help them prepare for cyber attacks, which can always become victims.

■ Background and project details

Currently, the number of cyber attacks is on the rise worldwide, making cybersecurity even more important. Japan is ranked second in the world in terms of the number of targets per country (※3), and many organizations and individuals are exposed to the risk of cyber attacks.

In recent years in particular, even large companies that have implemented sufficient security measures have been hit by a succession of damages caused by ransomware and targeted attacks, resulting in serious damages that directly affect management, such as business suspension, leaks of customer information, and effects on stock prices. Such damages have a significant impact on the continuity of corporate activities and social trust.

In addition, "cyber disasters" are increasing among individuals and families, including account takeovers and fraudulent money transfers through phishing scams, and unauthorized access to information through social media. These damages do not only result in financial losses, but can also have a significant impact on privacy and safety.

As cyber attacks are becoming more commonplace, the way we think about cyber attack countermeasures is changing from "complete prevention" to "preparing in advance, assuming that we will be attacked."

In light of this, we have created a "Cyber Disaster Preparedness Kit" to coincide with Cyber Disaster Preparedness Day on June 9th, which compiles basic measures that companies and households should take to prepare for cyber attacks, with the aim of spreading awareness that "anyone can become a victim of a cyber attack" and getting as many people as possible to adopt the idea of "cyber disaster prevention." This kit, like a typical "disaster prevention kit," is based on the premise that "cyber disasters" will occur close to home and systematically organizes the minimum efforts necessary to limit damage and achieve early response. We aim to serve as a practical guide for both companies and individuals.

Keep the list of your "cyber disaster prevention kit" in a visible place at your office or home, just like a disaster prevention kit, and always be aware of your initial response in the event of a "cyber disaster."

▶Click here to download the Cyber Disaster Preparedness Kit

■ Regarding the "Cyber Disaster Prevention Kit for Businesses"

The "Cyber Disaster Prevention Kit for Businesses" consists of five basic countermeasures: "Recovery strategy," "Data management," "External collaboration," "Education and training," and "Organizational structure."

★Let's remember with "Brushes are the basics"!

1. F. Recovery strategy: Reporting template, formulation of priority recovery system, trust restoration strategy
   This includes preparing reporting and disclosure templates for cyber attacks, formulating guidelines for the content and timing of communications to customers, shareholders and the media, clarifying recovery priorities for critical systems, considering alternative methods and systems in advance, and clarifying the analysis structure and person in charge to prevent recurrence.
2. Data management: Regular backups, preparation of forensic environment
   Regular backups of important systems and data, isolated storage of backup data, establishment of a system for collecting, visualizing, and storing logs, and preparation of tools and an environment capable of handling forensic investigations.
3. - External collaboration: Securing communication routes with government, police, and security vendors
   Establishing an emergency response coordination system with security and cloud vendors, establishing a reporting flow to the IPA, police, telecommunications companies, etc., securing consultation routes with legal counsel and the legal department, and confirming the security level and scope of responsibility of contractors.
4. Education and training: Conducting phishing drills and recovery exercises and establishing an improvement cycle
   Incident response training is conducted at least once a year, mock drills for phishing emails and targeted attacks are conducted, recovery training and BCP training are conducted across departments, and lessons learned are reviewed and reflected in manuals and training content.
5. Organizational structure: Visualization of chain of command, manuals, and emergency contact network
   This includes clearly defining the cyber incident response flow, establishing a CSIRT, ensuring coordination between management, the information systems department, and the public relations department, regularly updating the emergency contact network, and creating and sharing an initial response manual.

■ Regarding the "Home Cyber Disaster Prevention Kit"

The "Cyber Disaster Prevention Kit for Homes" is a set of five basic countermeasures: "Passwords and authentication," "Phishing," "SNS flame wars," "Account management," and "Notification settings."

★Let's remember with ``Parfait Hot''!

1. Password authentication: Using two-factor authentication and a password manager
   Set up two-factor authentication (MFA) when logging in to social media and cloud services. Use a password manager to create complex, random passwords, and prepare for list attacks, as many "passwords you come up with yourself" have been leaked in the past.
2. Phishing Prevention: The Habit of Not Opening Suspicious Links
   Do not open links or attachments in suspicious SMS or emails. Many attacks start with phishing, and one click can lead to virus infection or information leakage.
3. E: Social media outrage: Be careful about what you post and be mindful of "digital etiquette"
   Before posting, ask yourself, "Is it okay for my company, school, or parents to see this content?" In some cases, your home or school address may be identified from the scenery, uniform, or license plate number captured in the photo, which can lead to the risk of being stalked, burglarized, or defrauded.
4. A. Account management: Prevent unexpected problems caused by sharing accounts with family members
   Avoid sharing accounts with family members. Sharing streaming or gaming accounts with children can lead to unintended configuration changes and billing issues, making it difficult to pinpoint who is responsible.
   Also, keep your operating system and apps up to date, as outdated systems still contain known vulnerabilities and are attractive targets for attackers.
5. Notification settings: Instant notification of credit card usage and password changes for early detection of damage

Enable notifications regarding credit card usage, logins, password changes, etc. This will allow you to quickly detect fraudulent use or hijacking, minimizing damage.

[Download the Cyber Disaster Prevention Kit for Businesses and Homes here]

URL:https://cscloud-jp.my.salesforce.com/sfc/p/2v000002Kt8y/a/fB000000S1xI/dpLXhCSuKWcfkGo0N2AzJXnOZuc8u6o33Bk4mIYVn2U

Keep your cyber disaster prevention kit in a visible place at your office or home, and always be aware of your initial response in the event of a cyber disaster.

*1 "Cyber Disaster Prevention Day" is a commemorative day established by LINE Corporation. The date is a play on words, "6 (ro) 9 (ku)," and is intended to raise awareness of the need to be crime-prevention conscious (lock your doors) even on the Internet.

*2 The "Cyber Disaster Preparedness Kit" is a carefully selected and organized set of basic measures to prepare for cyber attacks. However, this alone is not sufficient, and additional measures according to the situation are also important.

*3 Source: BlackBerry Japan Co., Ltd.

https://www.blackberry.com/us/en/regions/ja/newsroom/press-releases/2024/blackberry-releases-global-threat-intelligence-report-for-q1-2024

About Cyber Security Cloud, Inc.
Address: 13th floor, JR Tokyu Meguro Building, 3-1-1 Kami-Osaki, Shinagawa-ku, Tokyo
Representative: Toshihiro Koike Representative Director, President and CEO
Established: August 2010
URL: https://www.cscloud.co.jp/

With the mission of "creating a cyberspace that people all over the world can use safely and securely," we are a Japanese security manufacturer that provides vulnerability information collection and management tools and fully managed security services for cloud environments, centered on web application security services that utilize the world's leading cyber threat intelligence. As one of the global companies in cybersecurity, we will contribute to solving social issues related to cybersecurity and provide added value to society.