Gartner Japan issued urgent recommendations in response to the sharp increase in unauthorized access at Japanese companies. It called for 7 measures, including inspection of internet-facing assets, as well as the development of a CTEM roadmap and the use of AI over the medium to long term. A July 2026 survey found that only 30% of large companies had adequate vulnerability management.
On 13 October, Gartner Japan issued urgent recommendations in response to the sharp increase in unauthorized access incidents at Japanese companies. The recommendations included 7 measures, beginning with urgent inspections of internet-facing assets, as well as the development of a CTEM roadmap and the use of AI for defense as medium- to long-term measures.
The recommendations called for urgent inspections of internet-facing assets, including web applications, APIs, administrative consoles, VPNs, cloud environments, offices and business partners. They specified that the inspections should cover not only vulnerabilities but also authentication and authorization, as well as configuration deficiencies.
They also called for cross-environment log analysis to check for signs such as unusual access, account creation, permission changes and large-scale data retrieval, along with checks on whether unnecessary personal information had been deleted.
To prevent lateral movement following an internal breach, the recommendations cited the need to strengthen segmentation and privileged access management. They also identified the need to confirm the impact on contractors and cloud service providers and establish communication arrangements.
Medium- to long-term measures included developing a CTEM roadmap to achieve continuous threat exposure management and using AI for defense.
A survey conducted by the company in July 2026 found that the proportion of large Japanese companies adequately implementing vulnerability management was only 30%.