As the business environment changes dramatically, it has become necessary to tackle various security measures. In response, an increasing number of companies are aiming to obtain ISMS certification, a framework for evaluating and certifying a company's information security management system and conducting risk analysis and improvements. However, obtaining ISMS certification requires knowledge, labor, and costs, and there are many challenges in maintaining and operating it. In addition, measures are required to address security risks that become visible through certification. In this video, we will review the basics from obtaining ISMS certification to operation and maintenance, and explain effective measures to strengthen security governance. We will also introduce services to reduce security risks that become visible through ISMS certification.