2Sen no Takumi Cloud Releases New Feature to Instantly Visualize Nth-Tier Subcontractor Structures and Incident Impact Scope

SecureNavi Inc. (Headquarters: Minato-ku, Tokyo; CEO: Tomohiro Izaki) is pleased to announce the release of the "Subcontractor Relationship Diagram / Impact Scope Analysis Function" for its security risk assessment cloud service, "2Sen no Takumi Cloud," designed for second-line departments (responsible for security, risk management, and compliance). This new feature visualizes the subcontracting structure of Nth-tier subcontractors and enables real-time identification of the impact scope during incidents.

This function allows users to grasp at a glance the complex subcontracting structure, including not only primary subcontractors but also secondary and tertiary subcontractors (Nth-tier subcontractors), presented in a hierarchical tree format. Furthermore, in the event of an incident, simply selecting the originating company instantly visualizes the affected managed items and subcontracting routes, supporting rapid response.

Background and Challenges

In subcontractor management, understanding the entire subcontracting structure, including Nth-tier subcontractors (secondary and tertiary subcontractors) beyond directly contracted primary subcontractors, is a critical challenge for risk management. Such threats are recognized across the industry, with "Attacks Targeting Supply Chains and Subcontractors" ranking 8th for the 8th consecutive year in IPA's Top 10 Information Security Threats 2026.

Traditionally, there have been limited means to visualize the overall subcontracting structure, often relying on manual management based on ledgers. Additionally, when a security incident occurs with a tertiary subcontractor or beyond, it has been difficult to quickly ascertain which of the company's managed items or operations would be affected, leading to delays in initial response.

2Sen no Takumi Cloud was developed to address these challenges.

Overview of the New "Subcontractor Relationship Diagram / Impact Scope Analysis Function"

The newly released function consists of two main components:

Subcontractor Relationship Diagram (Hierarchical Tree Display)

A new "Subcontractor Relationship Diagram" menu has been added, allowing visualization of the relationships between subcontractors and secondary subcontractors up to the 15th tier in a hierarchical tree. Two views are provided: a "Managed Item View" that displays the subcontractor hierarchy starting from a managed item, and a "Subcontractor View" that allows cross-sectional checking of managed items involved, starting from a subcontractor company.

Visualizes subcontractor and secondary subcontractor relationships up to the 15th tier in a hierarchical tree.

Managed Item View: Displays subcontractor hierarchy starting from a managed item.

Subcontractor View: Displays a cross-section of involved managed items starting from a subcontractor company.

Impact Scope Analysis Function (Incident Response Support)

This function is designed to instantly determine "which managed items/operations will be affected" in the event of an incident. By selecting the subcontractor company (applicable to any tier from 1st to 15th) that is the source of the incident, all managed items involved with that company and the subcontracting routes from the managed items to the originating company are displayed in a horizontal tree format.

Instantly visualizes affected managed items and subcontracting routes by simply selecting the originating company.

When multiple managed items are affected, routes can be switched and checked using tabs for each managed item.

The "Origin" tag displayed on the originating node allows for intuitive understanding of the impact path.

Future Development

With the release of this new feature, a foundation has been established to achieve both "comprehensive understanding of subcontracting structures" and "rapid response during incidents" in subcontractor management. 2Sen no Takumi Cloud will continue to support the creation of systems that enable continuous and efficient operation, freeing subcontractor risk assessment operations from manual, individual-dependent practices.

About 2Sen no Takumi Cloud

2Sen no Takumi Cloud is a risk assessment cloud service for second-line departments that covers check operations such as "subcontractor evaluation" and "internal system evaluation." It supports individuals in the second line (security, compliance, and risk management departments) within the Three Lines of Defense model to continuously operate risk check tasks. Official Website: https://fitgap.jp/audit

About SecureNavi Inc.

Company Overview

With a vision to "solve the tragic news of humanities in security with technology," SecureNavi Inc. is a company that solves information security challenges through software.

Company Name: SecureNavi Inc.

Representative: Tomohiro Izaki, CEO

Established: January 2020

Location: Shirakawa Showroom Bldg. 4F, 3-23-6 Nishi-Shimbashi, Minato-ku, Tokyo 105-0003

Corporate Website: https://secure-navi-inc.jp

Services Provided

ISMS/P Mark Automation Tool "SecureNavi" https://secure-navi.jp

Platform for Automating and Streamlining Compliance with All Security Regulations "Fit&Gap" https://fitgap.jp/fg

Security Risk Assessment Cloud for Second-Line Departments "2Sen no Takumi Cloud" https://fitgap.jp/audit

Security Check Sheet Automatic Response Tool "SecureLight" https://secure-navi.jp/securelight