Japan FSA Cybersecurity Guidelines for Financial Institutions 2.5.2.1-B: 2.5.2.1 Initial response (detection, intake, triage): basic actions

Detect incidents through monitoring, customer inquiries and notices from external security organisations; decide on the need for response after confirming the facts gathered; and prioritise incidents by business impact and report them under predefined criteria to the incident response manager, the CISO and management.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2.5 Incident response and recovery – Japan FSA Cybersecurity Guidelines for Financial Institutions

2.5.1-B 2.5.1 Incident response plan and contingency plan: basic actions
2.5.1-D 2.5.1 Incident response plan and contingency plan: desirable actions
2.5.2.2-B 2.5.2.2 Analysis: basic actions
2.5.2.3-B 2.5.2.3 Customer response, internal and external coordination, public relations: basic actions
2.5.2.4-B 2.5.2.4 Containment: basic actions
2.5.2.4-D 2.5.2.4 Containment: desirable actions
2.5.2.5-B 2.5.2.5 Eradication: basic actions
2.5.2.6-B 2.5.2.6 Recovery: basic actions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Japan FSA Cybersecurity Guidelines for Financial Institutions controls