Strengthening Cyber Risk Management
ACCJ member Ted Sato shares how his new cybersecurity book, written in collaboration with Keidanren, came about and discusses the issues it addresses.
Keidanren collaboration delivers book with practical advice to corporate leaders
As concern about cyber risk grows in Japan, a new book by veteran American Chamber of Commerce in Japan member and Marsh Japan, Inc. Senior Vice President Ted Sato aims to help corporate management find the most effective approach to mitigating risk and effectively responding to events.
Sato authored the book with Toshinori Kajiura, a member of Keidanren (the Japan Business Federation) and a senior researcher for information and communications technology policy at Hitachi. Kajiura was previously chair of Keidanren’s Working Group on Cybersecurity Enhancement.
🔼 Watch the video above for more insights from Sato himself.
Published in February by the Nikkan Kogyo Shimbun, a Japanese industry newspaper, Strengthening Cyber Risk Management: A Keidanren Handbook to Cyber Risk Management is designed to provide corporate managers with practical guidance for dealing with cyber risk.
Not to be confused with cybersecurity, cyber risk is defined by the US Department of Commerce’s National Institute of Standards and Technology as the “risk of financial loss, operational disruption, or damage from the failure of the digital technologies employed for informational and/or operational functions introduced to a manufacturing system via electronic means from the unauthorized access, use, disclosure, disruption, modification, or destruction of the manufacturing system.”
Sato told The ACCJ Journal that the book, which spans more than 200 pages, was written by professionals from the battlefield in easy-to-understand language. “We wanted corporate managers to be able to ask effective questions at the earliest stages of any cyber risk event. That is very important.”
“We wanted corporate managers to be able to ask effective questions at the earliest stages of any cyber risk event. That is very important.”
The idea came after a series of events last May which Sato conceived with Nikkan Kogyo Shimbun. The well-received sessions showed corporate managers how to deal with cyber risk, not solely as a technical issue but to emphasize management and factors related to organizational culture.
Keidanren had been hosting its own events since 2014, working to change the mind-set of corporate management on this critical issue. The organization built on Sato’s efforts to bring together professionals with similar motivation to create the Cyber Risk Management Japan Study Group, which was a supporting contributor to the book.
These efforts were also supported by the late Hiroaki Nakanishi, who was chair of Hitachi and Keidanren and contributed the foreword.
The book’s core advice draws on a 2014 report by the Internet Security Alliance and the National Association of Corporate Directors’ handbook on cyber risk, which recommends a one-team approach to corporate management. Beginning with the importance of expert advice from outside the company, the book advises an “art of science” approach that balances technology, human factor management, and operational excellence to ensure an organization’s readiness, response and recovery, and recurrence prevention.
The book has been well received by reviewers for its practical guidance.
“It is very meaningful to promote cooperation with experienced US firms at this early stage for Japanese companies,” Sato said. “If all goes well, next we plan to make an English version to share in Asia.”
Member Highlight: Kevin McAuliffe
Newport Ltd. President and 27-year ACCJ member Kevin McAuliffe shares his business experience in Japan.
The Newport Ltd. president and 27-year ACCJ member shares his business experience in Japan
Listen to this story:
What path led you to your current role in Japan?
I had worked for multinationals such as Time Inc. and Reuters in Asia from the mid 1970s to the early 1990s, but always wanted to start my own business. The opportunity finally came in late 1993, when I was asked by Reuters to transfer from Tokyo to the New York office. A former colleague from my Time Inc. days in Hong Kong was looking for an entrepreneur interested in importing and distributing a variety of consumer products in Japan that he sourced from China and other markets. This was prior to Don Quixote, Costco, and the ¥100 stores, so it seemed like a great opportunity. In January 1994, I left Reuters and established Newport Ltd.
What challenges is your company or industry facing?
Initially the issue was capital. I had to use a combination of my own savings and generous payment terms from my merchandise suppliers to get through the first few years. Next, it was competition as the above-named businesses and others entered the low-priced consumer product market. Newport then pivoted to branded goods and enjoyed solid growth for many years. However, during the past two years, we have seen major changes in consumer purchase patterns and are now testing strategies for the new normal.
What inspires you?
We strive for win–win outcomes in all our transactions. Providing opportunity to our customers, suppliers, and staff has been the driving force behind our growth and longevity.
“As a small to medium-sized enterprise, we succeed by innovating and executing well. In the constantly changing consumer products space, we have developed the capability to bring new products to market incredibly fast.”
What issues are important to you and how can you make a difference through your work?
Our company strives to be a sustainable corporation. We have been ISO 14001 certified since 2002. That’s the internationally agreed standard that sets the requirements for an environmental management system. From the beginning, all staff have been involved, and everyone is a member of a team working on a number of social, economic, and environmental goals. In addition, each of our brands is focused on several relevant Sustainable Development Goals set by the United Nations. Making positive impacts in these areas allows employees to find meaning beyond just their normal work responsibilities.
What is unique about your business?
As a small to medium-sized enterprise, we succeed by innovating and executing well. In the constantly changing consumer products space, we have developed the capability to bring new products to market incredibly fast. One example from some years ago is going from an initial supplier meeting to having a product in retail stores in less than five weeks. Though there are risks in being first to market, we use a kaizen cycle to constantly improve our ability to bring the right products to our customers.
How do you define success in Japan?
We can have profits while performing poorly and can lose money while doing a great job, so financial performance on its own is not enough. Success is a moving target, but I just ask, “Did we do our best?”
What advice do you have for someone new to the market?
Japan is a wonderful place to do business. There are plenty of challenges in finding capital, talent, and customers, but there are so many pluses. Years ago, I remember someone telling me that the opportunities in the Japanese market were in just avoiding the elephant’s feet. As long as you didn’t compete directly with the big players, there was lots of space to operate—especially if you were agile and creative. That was 30 years ago. Today, I would say that there are now more elephant feet, but there is still plenty of opportunity in between.