April 2025 – The Ministry of Economy, Trade and Industry (METI) of Japan has introduced a new initiative to strengthen cybersecurity across supply chains, particularly targeting small and mid-sized businesses. A new evaluation framework will help organizations assess, visualize, and improve their security practices.
With the growing complexity of supply chains and the increasing threat of cyberattacks, Japan is taking proactive steps to raise the overall security posture of companies working together across industries. This new system aims to standardize how cybersecurity capabilities are measured, communicated, and improved.
A Tiered Approach to Cybersecurity Readiness
The framework introduces a star-based cybersecurity evaluation model:
- ★3 (Basic Level): Covers essential security practices that all companies should have in place.
- ★4 (Standard Level): Involves stronger governance, incident response planning, and external third-party validation.
- ★5 (Advanced Level): Aligns with international best practices and emphasizes continuous improvement and strategic planning.
This simple three-level structure makes it easier for businesses to understand where they stand and what’s needed to improve.
Supporting Secure Supply Chains
This cybersecurity evaluation system isn’t just about individual companies—it’s designed to improve the overall health of the supply chain. By encouraging all participants to meet clear security standards, it reduces shared risk and builds trust between partners.
The system is especially useful for SMEs, who often lack resources but still play critical roles in supply chain operations. By following this framework, they can adopt practical security measures and demonstrate their readiness to larger clients and partners.
Launch Timeline
While the framework doesn’t yet have an official name, METI plans to begin rolling it out in fiscal year 2026. In the meantime, pilot projects and stakeholder discussions will help finalize the details and ensure the system meets real-world needs.
This is a big step toward a safer, more transparent digital ecosystem for all Japanese industries.