Security Days Fall 2026 presented the results of a survey of approximately 1,000 companies and developments in the SCS assessment scheme. The findings show how companies affected by supply chain attacks are reviewing the implementation of their countermeasures.
A presentation report from Security Days Fall 2026 explained the results of a survey of approximately 1,000 companies conducted by Soliton Systems and responses to the SCS assessment scheme promoted by the government. The report focused on the realities of risks that can arise through the supply chain and how companies are responding.
The survey showed that, following incidents caused intentionally or unintentionally by employees, supply-chain-related intentional or unintentional conduct was linked to damage in 18.2% of cases. Companies that had experienced damage were found to have higher implementation rates for measures including SCS response, MFA, SSO and zero trust.
Companies that had experienced damage showed a stronger tendency to prioritize ease of operation, and responses emphasizing reduced operational and administrator workloads were particularly prominent in reviews of MFA. Specifically, more than 70% of affected companies indicated that they prioritized operability, while the safety and practicality of recovery measures were identified as issues.
Regarding the SCS assessment scheme, management involvement is important, and obtaining ★3 or ★4 is positioned as part of the management decision-making process. The scheme encourages company-wide reviews of IT security and is structured around dialogue and cooperation with business partners.
Going forward, requests for SCS measures from business partners and the organization and coordination of transaction-related practices are expected to become central to implementation. A process was proposed for developing specific measures in cooperation with the business and procurement divisions, management and business partners, based on 3 areas of dialogue.