A seminar on "Zero Trust Security," a security measure based on the premise of "not trusting all communications," was held on Thursday, December 1, 2022 at the Kyoto Economic Center, hosted by Kyoto Sangyo 21 (Kyoto Industrial Support Organization 21) and Ksisnet Kyoto (Kyoto Small and Medium Enterprises Information Security Support Network), and Shozo Naito, Director of the Cyber Kyoto Institute (Professor at Kyoto Institute of Information Studies), was the lecturer.
Director Naito prefaced the meeting by saying that "zero trust security" measures are necessary to promote work style reform and DX (digital transformation). Conventional information security measures were taken at the boarder of the network, assuming that the data handled was only inside the computer, but security threats are increasing as data is transferred to the cloud or connected to external sources due to remote work, etc. He explained that traditional security measures are becoming insufficient due to the fact that there are cases where internal information become compromised.
Therefore, he emphasized the importance of verifying and restricting access to data, which is an information asset, on a zero-trust basis, as well as responding to social engineering resulting from usages by humans. After explaining recent cases, he suggested that it is impossible to completely eliminate incidents and that each organization should develop a BCP (Business Continuity Plan).
Cyber Kyoto Institute is an organization within the KCG Group (The Kyoto College of Graduate Studies for Informatics, Kyoto Computer Gakuin, etc.), which is the management and operation operator (registry) of the geographical name top-level domain ".kyoto". ), with activities based at Keihanna Open Innovation Center (KICK) . We aim to create an all-Kyoto system through collaboration among government, industry, schools, and the local community, and aim to improve the Kyoto brand, strengthen the dissemination of information, and revitalize the region while emphasizing public interest. It is the only school in the world in which a school organization is responsible for the registry of geographical name top-level domain.
