Macnica Networks Corp. (hereinafter President to as Macnica networks, which analyzes threats targeting Japanese organizations on a daily basis and provides security solutions ) is pleased to announce that it has entered into an agency agreement with SecurityScorecard Inc. (Headquarters: New York, USA CEO: Aleksandr Yampolskiy). We support our customers' supply chain risk management by visualizing and quantifying the security systems of domestic and overseas group companies, business partners, and other related companies that can be targets of supply chain attacks.

In recent years, with the globalization of business and the acceleration of ecosystemization of IT infrastructure, security damage caused by attacks originating in the supply chain has become more serious, and the importance of supply chain risk management in cyber security has increased rapidly. increase. In the "Top 10 Information Security Threats" published every year by the National Institute of Information and Communications Technology, "Attacks that exploit weaknesses in the supply chain" have appeared since 2019, and are still ranked 4th in 2021. increase. * Many of the leaks of confidential/personal information that have been announced in recent years have been caused by supply chain attacks via overseas affiliates with weak security. Although it is necessary to comprehensively grasp the security risks mentioned above, it is currently difficult to comprehensively grasp them from the viewpoint of budget and human resources because the targets to be grasped are wide-ranging.

SecurityScorecard, Macnica networks has recently started handling, can automatically collect information collected by attackers at an early stage (network security, patch application frequency, public web services, etc.) to address these issues faced by many Japanese companies. This is a SaaS-type service that analyzes and evaluates the security risks of target companies based on the collected information. By using this service, it is possible to conduct a vulnerability diagnosis of a target company without conducting a simulated attack, which is the traditional vulnerability diagnosis that places a heavy burden on the target system and security personnel.

This vulnerability diagnosis result will be evaluated on a comprehensive evaluation and 10 main items on a 5-point scale from A to D/F and a maximum of 100 points. This grade from A to D/F is a grade that correlates with the possibility of cyber breaches in the future, enabling quantitative evaluation. By comprehensively evaluating and properly understanding the security risks of your company and affiliated companies, you can take optimal security measures before attackers infringe on vulnerable sites.