Pony Kogyo Introduces Security Management Service 'SPC Trust Chain' for SCS Evaluation System

Source Pod Inc. (Headquarters: Shinjuku-ku, Tokyo; President and CEO: Takeshi Yamamoto; hereinafter "Source Pod"), a provider of cloud email security, cybersecurity, and security consulting services, announced that Pony Kogyo Co., Ltd. (hereinafter "Pony Kogyo") has implemented the security management service 'SPC Trust Chain' for the SCS Evaluation System to achieve a ★4 rating in the Security Countermeasure Evaluation System for Supply Chain Strengthening (hereinafter "SCS Evaluation System").

Pony Kogyo, a specialized trading company in non-destructive testing that supports quality control and maintenance for infrastructure facilities such as power plants and oil plants, has begun efforts to achieve a ★4 rating in the SCS Evaluation System, driven by the increasing security demands from the supply chain.

To obtain ★3 and ★4 ratings in the SCS Evaluation System, companies are required to comply with all evaluation criteria, which consist of 81 items for ★3 and 153 items for ★4. However, many companies undertaking SCS Evaluation System initiatives express that they "don't know what to do or how far to go" regarding these evaluation criteria. Furthermore, security checks for the evaluation criteria are not a one-time event; continuous checking and updating, meaning a PDCA cycle based on the evaluation criteria, are required even after obtaining the rating.

Security Check and Update Process for ★3 and ★4 Evaluation Criteria

[1] Assessment: Evaluation and gap analysis against the evaluation criteria at the start of the initiative.

[2] Countermeasures and Preparation: Preparation of countermeasures for unfulfilled or problematic evaluation criteria.

[3] Operation and Inspection: Implementation of operations and inspections required by the evaluation criteria.

[4] Response to Guideline Updates: Extraction of differences between existing and new guidelines, and response to these differences through [1], [2], and [3].

Pony Kogyo, which handles daily information system-related tasks with only two employees while also managing general affairs and material management, had concerns about addressing the 153 items in the ★4 evaluation criteria. They also faced challenges with management using Excel check sheets, leading them to implement the security management tool 'SPC Trust Chain' for integrated management of the acquisition and operation processes for SCS Evaluation System ★3 and ★4.

Since its introduction around May 2026, significant effects have been observed within approximately one month:

Efficient Response to 153 ★4 Evaluation Criteria Items through the "Self-Check Function"

Many evaluation criteria contain abstract expressions that make it difficult to determine the correct response. The system includes a help function that displays specific supplementary explanations. By pressing the help button, explanations appear immediately alongside, enabling efficient responses from both a decision-making and usability perspective.

Many evaluation criteria refer to other items, such as "as defined in No. XX..." or "as indicated in No. YY...". With Excel, it is time-consuming to scroll between items to confirm. However, the target question and its answer can be confirmed instantly in a separate window, allowing for quick and effortless responses.

Responses are provided in a question-and-answer format for each evaluation criterion, and progress is visualized and shared as a response rate. It is also possible to leave notes for each question and assign担当者 (person in charge), which helps prevent misunderstandings in collaborative work and facilitates smooth collaboration with multiple individuals, departments, or external partners.

Thanks to these benefits, one employee at Pony Kogyo was able to complete the self-check in about two weeks while also handling other duties. Starting in June 2026, they will utilize the "Issue Management Function" to register gaps identified through the self-check as issues, and promote company-wide initiatives by setting countermeasures, responsible parties, priorities, and deadlines.

Pony Kogyo is also utilizing the consulting service 'STC S4 Consulting' for ★4 acquisition, in addition to 'SPC Trust Chain'. When consulting with multiple companies from September to October 2025, other companies' proposals primarily focused on the development of regulations. Addressing the SCS Evaluation System requires more than just developing regulations; it demands a comprehensive approach encompassing risk assessment, planning, employee training, internal audits, management reviews, and the implementation of technical measures such as multi-factor authentication and log management. Source Pod's support covers this entire process comprehensively, leading to its adoption alongside 'SPC Trust Chain'.

Source Pod aims to strengthen information security for Japanese companies through a "three-pronged approach" of "application of policies and rules to organizations," "effective education for people," and "effective measures for systems," thereby realizing a society where everyone can connect with peace of mind.

Pony Kogyo Implementation Case Study Page

For detailed interviews on this matter, please visit the following page:

https://www.source-pod.co.jp/cases/20260701.html

[SCS Evaluation System ★3, ★4 Acquisition and Operation Support Service]

About SPC Trust Chain

This is a security management service for acquiring and operating ★3 and ★4 ratings for the Ministry of Economy, Trade and Industry's "Security Countermeasure Evaluation System for Supply Chain Strengthening (SCS Evaluation System)". It supports security checks, self-assessments/audit applications, and operational management. It also centrally manages ★ acquisition information, dramatically reducing the management workload for both those requesting and those responding to security checks. https://www.source-pod.co.jp/lp/tc/

About STC Consulting This is a security consulting service that supports the establishment of systems, document creation, and operations for acquiring ★3 and ★4 ratings for the Ministry of Economy, Trade and Industry's "Security Countermeasure Evaluation System for Supply Chain Strengthening (SCS Evaluation System)". https://www.source-pod.co.jp/service/stcc/

[Company Overview / Contact Information]

About Source Pod Inc.

Since its founding in 2006, the company has been involved in the provision, operation, and management of email security services, including cloud email misdelivery prevention and PPAP countermeasures 'SPC Mail ST', for over 15 years. In addition, as cybersecurity services, they offer information security education 'SPC Literacy+' and targeted email training 'SPC Targeted Email Training' for human information security measures, 'SP Security Training' for information security training, and the security management service 'SPC Trust Chain'. They provide services to many customers, including central government ministries, local governments, major financial institutions, and educational institutions such as universities.

https://www.source-pod.co.jp/

Inquiries Regarding This Release

(For service details and application)

Source Pod Inc. Sales Department

https://www.source-pod.co.jp/lp/tc/

TEL: 03-5213-4842

(For the content of this press release)

Source Pod Inc. Business Development Department, Marketing Communication Team

https://www.source-pod.co.jp/contact/company/

TEL: 03-5213-4842

*Please note that the contents described in this release are as of the date of announcement and are subject to change without prior notice.