Japan Seeks to Enhance Cybersecurity by Doubling Industry Professionals by 2030

The Japanese government is taking cybersecurity very seriously.

In fact, it is looking to double the number of qualified cybersecurity personnel in the country to help in monitoring threats and countering cyberattacks against domestic companies and government agencies alike.

The main goal is to increase cybersecurity professionals to 50,000 by 2030, and one way Japan is looking to accomplish it is by lessening the financial burden that comes with maintaining the required certification to be a professional in the field. This step would also expand opportunities in companies, which in turn would align with the government’s other goal of increasing cooperation between the private and public sectors.

The Registered Information Security Specialist Certifcation: A Burden to Professionals?

The certification in question is the Registered Information Security Specialist certification, which was first put in place in 2016 and has since been enforced. The certification recognises cybersecurity specialists, whom companies and other organisations can contract to develop defence strategies, manage incident responses, and perform other security-related processes. At the moment, Japan has about 24,000 cybersecurity experts with the Registered Information Security Specialist certification, and that number is far less than the 110,000 professionals Japan needs to tighten its cybersecurity.

This certification is required to be renewed every three years to ensure that security specialists are up to date in terms of security trends, knowledge, and skills. In addition, practical training and other obligations are required to facilitate the renewal, and it can cost upwards of ¥100,000. This costly renewal casts a heavy financial burden to Japan’s cybersecurity experts and is contributing to the shortfall in professionals in this all-important field.

Japan Is Actively Responding to Changing Times in Cybersecurity

It is for this reason that the Japanese government is seeking to ease renewal requirements starting in fiscal year 2026. One major change is that individuals already engaged in relevant corporate work will no longer have to do the practical training component required for renewal. Also in the works this fiscal year is a plan to compile a directory outlining the professional expertise and desired work locations of certified personnel. The aim of this plan is to match cybersecurity experts with companies.

Starting in 2026, the Japanese government is also planning to continuously assess companies’ cybersecurity measures and make strong cyber defence a requirement for receiving public subsidies.

In charge of planning the ambitious project is Japan’s Economy, Trade and Industry Ministry, which will present its final proposal for the measures to a panel of experts. This pivot in Japan’s approach to cybersecurity was prompted the ever-increasing number of cyberattacks the country is experiencing. It is also running parallel to related bill for “active cyber defence,” which is designed to prevent severe cyberattacks and is expected to be passed soon.