Fujitsu and PwC Japan partner on economic security measures for sovereign cloud solution

"The new guideline developed together with PwC Japan will clearly articulate the reliability of Fujitsu's sovereign cloud service and its alignment with Japan’s Economic Security Promotion Act. By offering practical guidance for meeting regulatory requirements, we aim to substantially reduce the compliance burden for our customers. Through Fujitsu's secure and dependable sovereign cloud service, we are committed to empowering our critical infrastructure partners to operate safely and sustainably."

"We are excited to contribute PwC Japan's expertise in cloud security, supply chain regulations, and digital governance to Fujitsu's sovereign cloud service. This collaboration creates an environment where Japan's critical infrastructure companies can efficiently navigate regulatory compliance, including the development and implementation of risk management measures, and utilize cloud services with greater confidence."

"This sovereign cloud service, built upon Oracle's robust technology and enhanced by Fujitsu's extensive customer service experience, is a vital offering in today's geopolitical landscape. To effectively leverage the agility and advanced technologies like AI within systems handling critical data, ensuring digital sovereignty through sovereign cloud adoption is crucial. PwC Japan looks forward to collaborating with Fujitsu to support DX promotion and the co-creation of reliability in Japan."

The reference guide will systematically organize the compliance status of Fujitsu's sovereign cloud service with the System for Ensuring Stable Provision of Critical Infrastructure Services, covering all 27 requirements for constituent equipment and 14 requirements for outsourced critical maintenance and management services as stipulated by the risk management measures. Specifically, it will detail: 1) the shared responsibility model between cloud users and cloud providers, 2) measures taken to meet the requirements for sovereign cloud and verifiable evidence of management status, 3) guidelines for actions that users should implement, and 4) reference information for related services and functions.

The guide will visualize the reliability and suitability of Fujitsu's sovereign cloud service for the Economic Security Promotion Act, leveraging Fujitsu's pioneering framework and operational governance in Japan. Through this, both companies will present a practical framework that connects security acceptance testing, control information such as organizational structures and countermeasures, and the practical responses of users. This will significantly support specified critical infrastructure operators in simultaneously reducing the burden of compliance with the System for Ensuring Stable Provision of Critical Infrastructure Services and promoting cloud utilization.