Japan FSA Cybersecurity Guidelines for Financial Institutions 2.2.2.1-B: 2.2.2.1 Collection and analysis of threat and vulnerability information: basic actions

Collect own threat information (own incidents) and, from public bodies, information-sharing organisations and third parties, threat information on attacks (including those caused by error or insider misconduct and cases at other organisations) and vulnerability information (including weaknesses found in exercises); organise and analyse it and assess its impact on the business and information assets; and review the sources and collection and analysis methods at least once a year.