IPA (Information-technology Promotion Agency, Japan) is an incorporated administrative agency under METI.
Overview
IPA (Information-technology Promotion Agency, Japan) is an incorporated administrative agency under METI. Its mission is to build a trustworthy IT society by strengthening cybersecurity, issuing guidance, and developing IT talent. The current president is Hiroshi Saito.
Main roles
-
National exams: Operates the Information Technology Engineers Examination (e.g., IT Passport, Fundamental Information, Applied Information, Registered Information Security Specialist/SC).
-
RISS system: Manages registration/renewal/training for Registered Information Security Specialist holders (valid for 3 years; renewal requires online training, etc.).
-
Vulnerability information: Co-runs JVN / JVN iPedia with JPCERT/CC to publish and share vulnerability information in Japan.
-
Incident response & evaluation: J-CRAT for targeted-attack response; JISEC (Common Criteria certification) for IT product security.
-
SMB support: SECURITY ACTION self-declaration program (one-star/two-star) to promote practical security measures.
-
Human resource development: MITOU (Unexplored) Program—Standard/Advanced/Target—and Security Camp (national, next, junior).
-
Research/white papers: Publishes the annual Information Security White Paper, Top 10 Security Threats, and DX Trends reports.
2025 recent topics
-
Sep 10: Published the Information Security White Paper 2025 (PDF).
-
Jan 30: Announced Top 10 Security Threats 2025 (ransomware etc. high for organizations; individual rankings not listed).
-
Jun 26: Released DX Trends 2025 (Japan vs. U.S./Germany comparison).
When IPA is useful
-
Certifying your skills through national exams (FE/AP/SC, etc.).
-
Building a baseline security posture for your company (SECURITY ACTION).
-
Checking vulnerabilities (JVN/iPedia) or obtaining product security certification (JISEC).
Comments
Post a Comment