Macnica provides Iyo Bank with risk rating tool "SecurityScorecard" to help strengthen supply chain risk management - Realizing continuous understanding of the security posture of approximately 300 outsourced companies -

Macnica (Head office: Yokohama, Kanagawa Prefecture; Representative Director and President: Kazumasa Hara; hereinafter referred to as Macnica) announced today that it has provided the risk rating tool, SecurityScorecard, to The Iyo Bank, Ltd. (Head office: Matsuyama, Ehime Prefecture; President and Board Director: Kenji Miyoshi; hereinafter referred to as "Iyo Bank") to help strengthen supply chain risk management.

■Background
The increasing number of incidents caused by supply chain attacks has forced many companies to review security throughout their entire supply chains. In response, the Ministry of Economy, Trade and Industry (METI) has announced a policy proposal to introduce a rating system for supply chain companies by fiscal year 2026 ^{* 1}, and the Financial Services Agency has issued security guidelines ^{* 2}, which mention the need for "security management using security risk assessment tools."
In August 2024, Iyo Bank experienced an incident in which a subcontractor was the victim of unauthorized access via ransomware, resulting in the leakage of personal information. Fortunately, no secondary damage such as misuse of information was confirmed, but the incident highlighted the problem that the previous evaluation method for outsourcing companies was not able to fully guarantee objectivity, and that although additional investigations were conducted on companies with low evaluations, the evaluation criteria were insufficient and the bank was not able to identify all targets. To prevent a recurrence of this incident, the bank decided to consider a solution that would accurately and continuously monitor the security posture of the bank and its group companies, as well as its approximately 300 outsourcing companies, in order to strengthen supply chain risk management.

■Reasons for selecting SecurityScorecard
SecurityScorecard is a risk rating platform that regularly diagnoses, visualizes, and quantifies external security risks. By identifying weaknesses and making improvements based on the score results and discovered issues, it helps to create an organization/environment that is less likely to be targeted by attackers.
The reasons why Iyo Bank chose SecurityScorecard are as follows:
・It can be used not only for your own organization but also as a supply chain risk management tool for managing outsourced contractors.
-Having scoring indicators based on essential criteria
Example: If a company does not consistently work to strengthen its internal controls, it will not be considered an improvement.
・Specific problems are identified and a recommended action plan for their improvement is presented.
・It is a flexible license format that can accommodate changes in the managed objects.
・The reports are easy to read and understand, even for people who are not familiar with the system, and the UI is intuitive.

■Effects of implementation
In addition to checking new contractors, regular annual checks are also conducted on existing contractors, and contracts with those with low scores are reconsidered, making it possible to select secure contractors based on objective, quantitative evaluation criteria. Furthermore, even if a contractor receives a low score, points for improvement are identified, making it easier to take action, and security awareness on the ground is also improving.

■ Future outlook
Considering that the Financial Services Agency's guidelines also recommend the use of external evaluation tools for security measures, Iyo Bank is considering a policy of setting KPI score targets that will include group companies and external contractors, with the expectation that making such scores public will become the standard in the future.

Macnica will utilize the experience and knowledge it has gained through providing a variety of products and services to promote the use of risk rating tools and contribute to strengthening supply chain security by proposing optimal approaches for improvement.

*1: Ministry of Economy, Trade and Industry "Interim report on the establishment of a security measures evaluation system aimed at strengthening supply chains"
https://www.meti.go.jp/press/2025/04/20250414002/20250414002.html
*2: Financial Services Agency's "Guidelines for Cybersecurity in the Financial Sector"
https://www.fsa.go.jp/news/r6/sonota/20241004/18.pdf

[Click here for details of the case]
URL: https://www.macnica.co.jp/business/security/manufacturers/securityscorecard/case_02.html

[For product inquiries, please click here]
Macnica SecurityScorecard
TEL: 045-476-2010
E-mail: SSc-Sales@macnica.co.jp

*Company names and product names mentioned in this text are trademarks or registered trademarks of Macnica and each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.