JP — ITmedia
Nomura Research Institute launches service to support proactive system shutdowns during cyberattacks
Security2 min read
Nomura Research Institute (NRI) and its subsidiary NRI Secure Technologies started a service that helps companies decide when to shut down and restart their systems after a cyberattack. The service aims to help top managers make quick decisions.
A new service for hard decisions
On October 22, NRI and NRI Secure Technologies launched a service called "Cyber Resilience Management Support." It helps companies that have been attacked choose when to stop and restart their systems on purpose. The service sets rules for these choices and a clear decision process, so leaders can act fast and stop damage from spreading. The article says attacks that use AI are becoming more advanced.
Key facts
- The support period is about 2 to 3 months at the shortest.
- The work has 4 steps: check the current situation, set decision rules, design operations, and get agreement from top managers.
- Main customers include online shops, digital service operators, global manufacturers, financial companies, and other critical infrastructure companies.
- The service also estimates costs such as emergency spending, damages, customer compensation, and lost sales.
- Risks that are hard to measure in money, such as trust and brand damage, are also checked.
Why shutting systems down can be the right move
Sometimes the safest step during an attack is to turn off a system on purpose. This idea got public attention after a serious flaw was found in PHP, a programming language used to build websites. On October 21, Japanese Prime Minister Sanae Takaichi wrote on X that temporarily pausing websites can be an effective way to lower risk if security fixes cannot be applied quickly. Her post drew a big response online.
Why it matters
Many companies find it hard to decide whether to stop a service, because stopping it also costs money and trust. A clear plan made before an attack can help leaders act without delay. As AI helps attackers find and use flaws faster, this kind of planning may become more important for many organizations.
What to watch
- Whether more companies sign up for the service.
- How companies use shutdown rules when new security flaws are found.
- Whether other security firms offer similar planning support.
- How fast PHP flaws and similar AI-found flaws are fixed in the coming months.
Glossary
- NRI Secure Technologies
- A subsidiary of Nomura Research Institute that provides information security services.
- PHP
- A programming language widely used to build websites.