CEC Launches 'SCS Evaluation System Support Solution' to Assist with Supply Chain Security Certification

CEC Corporation (headquartered in Shibuya, Tokyo; President and CEO: Takashi Himeno; hereinafter 'CEC') will begin offering the 'SCS Evaluation System Support Solution' on Tuesday, July 14, 2026, as a new solution under its Cyber NEXT security service brand.

In recent years, cyber risks originating from supply chains have increased significantly, requiring organizations not only to strengthen their own cybersecurity measures but also those of their business partners and subcontractors.

This solution leverages the expertise and track record accumulated through 'Cyber NEXT' to support enterprises and organizations aiming to comply with the Supply Chain Security Evaluation System (hereinafter 'SCS Evaluation System')※.

It provides a one-stop offering of all necessary measures for regulatory compliance, consistently supporting from visualizing security levels and identifying issues to implementing countermeasures and maintaining operations after certification. Furthermore, beyond mere compliance, CEC will integrate its own security services to accompany customers from evaluation through daily operations, supporting enhanced security and stable business continuity.

※ A government-led evaluation system being developed by the Ministry of Economy, Trade and Industry (METI) and the National Cyber Strategy Headquarters in the Cabinet Office to visualize the cybersecurity posture of companies within supply chains. The system aims for implementation around the end of fiscal 2026.

Development Background

Cyberattacks targeting supply chains have become increasingly frequent. As a result, organizations face significant challenges due to the lack of objective methods to assess the cybersecurity posture of business partners—including suppliers and subcontractors—and the need to respond to varying requirements from each partner.

In response, METI is advancing discussions on the SCS Evaluation System. However, many organizations on the ground express concerns such as 'We don’t know where to start,' 'We don’t understand the difference between existing standards like ISMS and the SCS Evaluation System,' and 'We’re unsure how to address missing security measures.'

To address these challenges, CEC is launching the 'SCS Evaluation System Support Solution.' Leveraging its extensive experience in security-related services, CEC will visualize an organization’s current security status, clarify necessary actions, and provide comprehensive support for the direction and entire execution process toward achieving SCS certification.

About the 'SCS Evaluation System Support Solution'

This is a comprehensive solution that supports enterprises and organizations aiming for compliance with the SCS Evaluation System—from visualizing their own cybersecurity posture, organizing identified issues, implementing countermeasures, to continuous operations after certification. In addition to consulting for regulatory compliance, it combines the specialized expertise and IT technologies developed through 'Cyber NEXT' to deliver one-stop support from certification assistance to overall security enhancement.

• Product website: https://service.cec-ltd.co.jp/security/scs-evaluation-solution

<Main Services>

Internal Security Assessment

A service for organizations struggling to understand their own security level or to meet third-party evaluation requirements from partners. By visualizing security levels as objective scores, it clarifies the organization’s current position relative to the SCS Evaluation System and identifies future action items.

Offers assessment services tailored to budget and needs—from a simplified 'Score Diagnosis' to a 'Scanner Diagnosis' that scans the customer’s IT environment and proposes improvements for identified vulnerabilities.

Full Consulting

A service for organizations unsure of where to begin or how to proceed with achieving SCS certification. It evaluates and analyzes the customer’s current security posture, visualizing the gap between the current state and the requirements for SCS certification. Consultants then provide end-to-end support—from identifying organizational issues to developing improvement plans. Beyond outlining specific steps toward certification, it offers hands-on support throughout the entire execution process of necessary improvements.

Ticket-Based Consulting

Designed for organizations that have already implemented a certain level of security measures based on existing standards such as ISMS. While building on the customer’s current security posture, it efficiently fills gaps in measures required for SCS certification through ticket-based consulting. By focusing only on additional necessary actions, organizations can pursue SCS certification while controlling costs.

Post-Certification Implementation and Operational Support

Leverages various solutions from 'Cyber NEXT,' including 'CEC SOC'—which has extensive experience in 24/7 operational monitoring—and 'SmartSESAME,' which addresses office security challenges such as multi-factor authentication and unauthorized access prevention. This enables end-to-end support—from implementing required measures for certification to maintaining certification and ongoing operational support afterward. Beyond certification, it supports long-term security enhancement and the establishment of a stable operational framework.

• Cyber NEXT product website: https://service.cec-ltd.co.jp/security

• SmartSESAME product website: https://sesame.cec-ltd.co.jp/

<Pricing>

Internal Security Assessment (tax included): From ¥330,000

Full Consulting (tax included): From ¥1,595,000

Ticket-Based Consulting (tax included): From ¥528,000

About the Total Security Solution 'Cyber NEXT'

The total security solution 'Cyber NEXT' protects customers’ businesses by combining cutting-edge technology with the mission of a dedicated security service provider, in response to evolving cybersecurity threats. Leveraging expertise cultivated as a team of security specialists—from endpoints to cloud environments—it delivers consulting, design, implementation, and operational services tailored to customer needs.

※ Company names, product names, and other proper nouns mentioned are trademarks or registered trademarks of their respective owners.