Cybersecurity Management Guidelines Ver 1.1

3.3. Develop proactive measures to prevent cyber-attacks.
(6) Secure resource (budget, manpower etc.) to execute cybersecurity measures
Has a budget to implement cybersecurity measures been secured? And have
directions been given to develop human resource and to provide proper treatment
for them?
Scenario in case of no action for security
*Without any proper budget, it would be difficult to perform cybersecurity measures
and obtain necessary manpower within an organization and also to entrust it with a
reliable vendor.
*Without satisfactory treatment or improvement for personnel, it is impossible to retain
talented human resource within an organization.
Example of recommended actions
*Give directions to specify cost needed to prepare identified proactive measures for
cybersecurity.
*Provide continuous training on security by securing budget for trainings for not only
personnel in charge of security but other employees.
*Obtain approval for budget after evaluating at a management meeting about whether or
not expenditure is worth implementing measures.
*Consider using professional vendors in the event that it is hard to find human resource
for cybersecurity within an organization.
*Give HR department directions to develop human resource for cybersecurity and to
pave the way for career path in the course of human resource development efforts, and
also to review what they work for these purposes.
15