The Financial Services Agency and the Bank of Japan issued an unusual request to change the ransomware recovery period from the previous 2 months to 1 week, and 3 key points for achieving this were presented. The discussion also touched on users' responsibilities in cloud environments and blind spots in Microsoft 365.
The Financial Services Agency and the Bank of Japan called for a review of the current practice of allowing approximately 2 months for recovery work following a ransomware incident, requesting that the period be shortened to approximately 1 week. The specific background and reasons are detailed in the main article.
3 key points for shortening the recovery period were presented, including establishing an internal recovery framework, reviewing procedures and using external support. These measures are intended to speed up recovery.
The discussion also pointed out that users' responsibilities in cloud environments are often overlooked, and listed points requiring attention during operations. Specific practical responses were encouraged.
It was also noted that Microsoft 365 has blind spots, highlighting the need to strengthen companies' overall security measures.