April 16, 2024 Measures (Guidance) for Ensuring Rigorous Protection of Secrecy of Communications and Cybersecurity at LY Corporation

 MIC issued administrative guidance dated March 5, 2024, to LY Corporation (headed by IDEZAWA Takeshi, President and Representative Director, CEO). On April 1, 2024, MIC received a report from the company regarding their initiatives to prevent reoccurrences. Based on the report, MIC has issued written administrative guidance today that requests early implementation of the measures requested in the administrative guidance and reporting on the implementation status and plan.

1. Background, etc.

 MIC has issued administrative guidance to LY Corporation (headed by IDEZAWA Takeshi, President and Representative Director, CEO, corporation no. 4010401039979, head office: Chiyoda-ku, Tokyo) in accordance with the "Guidance for Ensuring Rigorous Protection of Secrecy of Communications and Cybersecurity" (Soukiyo No. 46), dated March 5, 2024. MIC received a report from the company on April 1, 2024, regarding its initiatives to prevent reoccurrences, etc.
 According to the report, certain emergency measures have been implemented. However, security management measures and contractor management are still insufficient at this point. In addition, there is no clear prospect of a sufficient review of the security governance system for the entire group, including the parent company. Therefore, MIC has determined that it is necessary to expediate the implementation of the measures and review it.

2. Details of measures, etc.

 In light of the above, MIC has issued written administrative guidance dated today. The guidance requests LY Corporation to implement the following measures and provide a clear and specific report on the implementation status and plan for these measures.

1. 1.
   Expediting the fundamental review and strengthening security management measures and contractor management to address the incident
2. 2.
   Expediting the fundamental review and strengthening security governance throughout the group, including the parent company, etc.
3. 3.
   Ensuring users receive updates on the progress of these initiatives on a regular basis

 MIC will continue to provide necessary guidance and supervision to ensure the protection of secrecy of communications and cybersecurity.