Kitakami Shinkin Bank (Head Office: Kitakami City, Iwate Prefecture) has been conducting annual outsourcing risk checks for over 20 years since the Personal Information Protection Law came into effect. Amidst growing public concern over cybersecurity and supply chain risks, the bank recognized a widening gap between its existing operations and the evolving external environment. To enhance its outsourcing risk management, it has introduced "2sen no Takumi Cloud."

Read the full article here: https://fitgap.jp/voices/00002

Background of Introduction

Kitakami Shinkin Bank began its annual outsourcing risk checks over 20 years ago, coinciding with the enforcement of the Personal Information Protection Law, and had been reliably operating these checks according to established procedures. However, the original questionnaire was designed with personal information protection as its starting point and did not incorporate measures for recent issues such as cybersecurity and supply chain risks. In response to these changes in the external environment, the bank felt a growing disconnect between its current operations and these new challenges.

Overview of Introduction

Kitakami Shinkin Bank achieved a smooth transition with minimal learning costs for its operational departments by uploading its existing checklist directly to "2sen no Takumi Cloud," without needing to rebuild the system from scratch. Furthermore, the centralized cloud management of outsourcing check data enabled real-time information sharing not only with the personal information management department but also with other departments. Following the introduction, the bank is progressively reviewing its check items in line with FISC's security standards and the Financial Services Agency's guidelines.

Effects of Introduction

Achieved a system where outsourcing check data is centrally managed in the cloud, accessible and shareable with other departments at any time.

Enabled other departments, not just the personal information management department, to participate from a cybersecurity perspective, lowering the barrier to internal collaboration.

Established a foundation for building a management reporting system on check implementation status, enabling preparedness for on-site audits by the Financial Services Agency.

Comment from Mr. Takahashi, Administrative Management Section, Kitakami Shinkin Bank

"We were able to conduct checks following the same procedures every year, but with supply chain risks changing rapidly, I always had a nagging feeling that simply continuing the old way was not truly sufficient. What was significant about '2sen no Takumi Cloud' was that it didn't just move our current methods to the cloud; they helped us organize and articulate the vaguely felt issues and propose solutions. We could start by utilizing our existing checklists as they were, and it allows for integrated management of risks not only for outsourcing partners but also within the company. I felt this would be the starting point for reviewing our systems to align with the next era, starting from a form close to our current operations, rather than jumping to the latest finished product." ■ Read the full article here: https://fitgap.jp/voices/00002

About Kitakami Shinkin Bank

Location: Kitakami City, Iwate Prefecture

Business Activities: Providing community-based financial services

Official Website: https://www.shinkin.co.jp/kitakami/

About 2sen no Takumi Cloud

"2sen no Takumi Cloud" is a risk assessment cloud service for second-line defense functions, covering check operations such as "outsourcing partner evaluation" and "internal system evaluation." It supports individuals in second-line defense roles (security departments, compliance departments, risk management departments) within the three-line defense model to continuously operate risk check tasks.

https://fitgap.jp/audit

About SecureNavi Inc.

With a vision to "swiftly resolve the unfortunate situations of humanities-focused security with technology," SecureNavi Inc. is a company that solves information security challenges through software. They provide solutions that digitize and enhance "humanities-focused security" domains, including information security certifications, regulatory and guideline compliance, policy development and operation, and audits and inspections.

Company Overview

Company Name: SecureNavi Inc.

Representative: Tomohiro Izaki, CEO and Representative Director

Established: January 2020

Location: Shirakawa Showroom Bldg. 4F, 3-23-6 Nishi-Shimbashi, Minato-ku, Tokyo 105-0003

Corporate Site: https://secure-navi-inc.jp/

Services Provided

ISMS/P Mark Automation Tool "SecureNavi" https://secure-navi.jp/

Automation and Efficiency Platform for All Security Regulations "Fit&Gap" https://fitgap.jp/fg

Security Risk Assessment Cloud for Second-Line Defense "2sen no Takumi Cloud" https://fitgap.jp/audit

Security Checklist Automation Tool "SecureLight" https://secure-navi.jp/securelight

FACT BOX

  • Source: PR TIMES
  • Category: 企業動向