Weeds Systems Releases Free Self-Check Tool for SCS Evaluation Standard ★3 Readiness

Weeds Systems Co., Ltd. (Headquarters: Nakano-ku, Tokyo; President and CEO: Yutaka Otsuka; hereinafter “the Company”) has released a free content titled “Readiness Self-Check for SCS Evaluation Standard ★3 Compliance,” designed to help companies organize internal topics that need confirmation or discussion.

Based on responses to 18 questions, this self-check instantly displays key themes to review from perspectives such as governance and rules, managed assets and partners, ID, permissions, and authentication, detection and monitoring, and incident response and recovery. It can be used without entering any personal or company information, and those who wish can receive a free “SCS Evaluation Standard ★3 Compliance Internal Sharing Report” based on their responses.

▼ Access the “Readiness Self-Check for SCS Evaluation Standard ★3 Compliance” here

https://weeds-japan.co.jp/scs3/

Background of Release

As awareness of supply chain security measures grows, companies are expected to organize their own security posture and be ready to explain it when necessary.

However, when preparing for compliance with the SCS Evaluation Standard, companies face a wide range of areas to verify—such as governance, rules, ID and permission management, log checks, and incident response. Even when reviewing requirements and checklists, it is not easy to determine “where to start” or “which area to discuss internally first” in the context of one’s own organization.

To address this, the Company has released this free self-check tool, enabling organizations to organize key topics for internal review and discussion through 18 targeted questions.

About the “Readiness Self-Check for SCS Evaluation Standard ★3 Compliance”

This self-check is a free content designed for companies considering SCS Evaluation Standard compliance, helping them organize internal topics that need initial confirmation or discussion.

By answering all 18 questions, users can instantly view their self-check results without entering personal or company information. The results highlight key themes and points that should be reviewed internally based on the responses.

It serves as a smooth starting point for initiating concrete discussions and planning within the organization toward SCS Evaluation Standard ★3 compliance.

※ Image of the Readiness Self-Check screen

Six Perspectives Covered in the Self-Check

The self-check evaluates your organization’s status from the following six perspectives, with a focus on SCS Evaluation Standard ★3 compliance:

1. Governance and Rules

Verify the personnel responsible for security response, designated officers, consultation points, internal rules, and procedures for confirmation and reporting.

2. Managed Assets and Partners

Review protected information, systems, devices, external services, and the status of connections and information sharing with business partners.

3. ID, Permissions, and Authentication

Check the usage status of user IDs, admin IDs, and shared IDs, rules for granting, modifying, and revoking IDs and permissions, and records of approvals.

4. Defense and Backup

Review malware protection, update management, network protection, backup targets, and the status of recovery verification.

5. Detection and Monitoring

Verify logs collected, monitored items, personnel responsible for checks, frequency of review, and records of anomaly judgments.

6. Incident Response and Recovery

Check contact points, reporting lines, decision-makers, initial response actions, recovery procedures, measures for recurrence prevention, and records of training and post-incident reviews during incidents.

What You Can Learn from the Self-Check Results

The self-check results instantly display key topics for internal confirmation and discussion based on your 18 responses.

For example, it helps organize key points for future actions from perspectives such as:

- Whether to first clarify the scope and overall picture of compliance - Whether to review existing rules and operational records - Whether to reorganize operations overly dependent on specific personnel - Whether to clearly define managed assets and review scope - Whether to enhance visibility into ID/permission management and user activities - Whether to organize incident response workflows and recovery procedures

This makes it easier to determine “where to start” for SCS Evaluation Standard ★3 compliance and to identify key points for internal sharing and discussion.

Free Internal Sharing Report for Interested Parties

After reviewing the self-check results, those who wish can receive a free “SCS Evaluation Standard ★3 Compliance Internal Sharing Report” based on their responses.

This report organizes the themes identified in the self-check into a format suitable for internal sharing and discussion.

- Overall Summary - Key Checkpoints by Category - Priority Items for Review - Rationale for Each Action Item - Summary of Diagnostic Results

It can be used as initial material for sharing status with stakeholders, organizing future review topics, and initiating discussions on response strategies.

※ Image of the Internal Sharing Report

How to Use

Access the self-check page and answer all 18 questions to instantly view your results. No personal or company information is required.

To request the internal sharing report, submit the form after viewing your results. A report based on your responses will be provided free of charge.

▼ Access the “Readiness Self-Check for SCS Evaluation Standard ★3 Compliance” here

https://weeds-japan.co.jp/scs3/

※ This self-check does not determine compliance eligibility or ★3 certification. It is intended solely to help organizations organize initial topics for internal review and discussion based on their responses.

About Weeds Systems Co., Ltd.

The Company provides the privileged ID and log management product “WEEDS Trace.”

WEEDS Trace is a privileged ID and log management solution with proven adoption, primarily among financial institutions. Through compliance with the IT controls and security standards required by financial institutions, the solution has strengthened capabilities such as access log collection, operation recording, and approval/confirmation mechanisms.

Today, beyond financial institutions, the Company provides products and services that support security operations for various industries where IT controls and security measures are increasingly critical.