Practical ISMS/PMS AI Online Testing Based on Company-Specific Rules

Media Fusion Co., Ltd. (Headquarters: Kita-ku, Osaka; Representative Director: Jun Sakakibara) will release the 'ISMS/PMS AI Online Test' in the summer of 2026. This system utilizes a company's existing ISMS and Privacy Mark (PMS) security rules to verify that employees understand their specific internal policies and can apply them correctly in practical work scenarios.

This system leverages generative AI to move beyond formal security training designed solely for passing audits, aiming instead to ensure that the rules actually operated within the company are correctly recognized and internalized by all staff. The service is intended for companies where ISMS operations are often handled by staff who also manage other primary business responsibilities.

▶ Click here for inquiries: https://www.mediafusion.co.jp/ask2/

● Background of Development In recent years, with the rise in information leaks and cyberattacks, obtaining and maintaining ISMS and Privacy Mark (PMS) certification has become a de facto requirement for many companies.

However, ISMS operational tasks often do not directly contribute to a company's immediate profits, and in many cases, the responsibility falls on staff who are juggling these duties alongside their primary roles. Consequently, security training often becomes a 'check-the-box' exercise to pass audits, remaining limited to formal knowledge verification.

Yet, companies that have already obtained ISMS/PMS certification have established security rules and operational procedures based on their specific business operations and risks. What is truly important is whether those rules are correctly recognized by each employee and applied to their decision-making in daily work.

Against this backdrop, we are developing this system to realize practical ISMS/PMS education that starts from the 'security rules defined by each company.'

● System Overview 'ISMS/PMS AI Online Test' is an online testing platform dedicated to ISMS/PMS education, designed to verify how well employees understand and correctly apply internal regulations and security rules in practical situations.

Unlike general knowledge tests, generative AI creates questions based on the actual rules operated within the company. This allows for evaluation from the perspective of 'is it understood and used for decision-making?' rather than simply 'was the training conducted?'

● Main Features • Question generation based on company-specific rules - Generative AI analyzes internal ISMS/PMS regulations and security rules. - Automatically generates online test questions based on the rules actually in use within the company. - Instead of general knowledge questions, it presents questions that verify 'understanding of company-specific rules.'

• Mechanism for repeated testing until a passing score is achieved - Employees can take the test as many times as necessary until they reach a passing score. - Rather than a one-time exam, it ensures understanding.