SynX Conducts Security Assessment on Production Environment During Late Hours for Government Cloud Service

SynX Inc. (CEO: Junichiro Nishi, Headquarters: Chiyoda-ku, Tokyo, Major Shareholder: Pole To Win Holdings, Inc. (100%), Listed on Tokyo Stock Exchange Prime Market (Securities Code: 3657), hereinafter referred to as SynX) has performed a security assessment on the cloud service for local governments provided by NTT DATA KANSAI Corporation (President & CEO: Hirotsugu Nakajima, Headquarters: Osaka City, Osaka Prefecture). This initiative included diagnostics such as network penetration testing during late-night hours, and involved a review of the execution framework while maintaining diagnostic standards and content.

Background: Safety and Practical Constraints for Local Government Systems

Electronic application and various procedure reception systems provided by local governments are required to have high availability and security as resident-facing services. Many of these systems often require Web application assessments and network penetration tests, making continuous response crucial. However, cost is also a significant consideration for the continuous execution of these assessments.

Initiative Overview

This initiative involved conducting security assessments on cloud services for local governments with the following details:

Target

Cloud services for local governments (electronic application and resident reception services)

Assessment Details - Web Application Assessment (5 business days) - Network Penetration Test (4 business days / conducted late at night)

Execution Conditions Execution Environment: Production environment Execution Time Slots: Daytime (9:00 AM - 6:00 PM) Late Night (9:00 PM - 3:00 AM the next day) Execution Positioning: Conducted as part of regular security assessments

Feature ①: Late-Night Assessment Response Network penetration tests were conducted between 9:00 PM and 3:00 AM to minimize impact on the service. This allowed for verification that closely reflects the actual environment, targeting the production environment's configuration and communication paths.

Feature ②: Assessment Execution Considering Operational Impact During assessments in the production environment, consideration was given to service impact, taking the following points into account: - Prior coordination with stakeholders and clarification of execution details - Setting of execution times, including late-night operations - Design of execution procedures considering potential impact This approach allowed for flexible adaptation of execution times and progress during the assessment.

Feature ③: Review of Execution Framework While Maintaining Assessment Standards In this initiative, the execution framework was reviewed while maintaining the assessment items, standards, and scope. This approach also considered the cost aspect, which is a key consideration for continuous assessments.

Regarding Continuous Assessment Execution

The target services operate on the premise of regular security assessments. As systems change through operation, continuous verification is important, not just one-off assessments. Regular assessments enable the identification and response to risks in accordance with environmental changes.

Customer Evaluation

We have received positive feedback regarding our flexible response, even under constrained conditions such as assessments in the production environment and late-night operations.

NTT DATA KANSAI Corporation Representative:

"From the perspective of ensuring the same level of quality as before, we had requested in advance that the diagnostic report include items we wished to confirm. You responded flexibly and delivered the materials as requested.

We hope to continue receiving your ongoing support. We look forward to building a collaborative relationship while continuing to exchange opinions on responding to new threats."

Future Outlook

SynX will continue to support continuous diagnostic operations by conducting security assessments tailored to system characteristics and operational conditions.

Detailed Information

Details of this initiative are available on the case study page of our website. URL: https://www.synx.co.jp/case/security_01

About SynX

SynX provides 'SynX One,' an integrated service encompassing development, QA, IT infrastructure, and security, supporting companies' DX promotion and business growth. Through consistent service delivery via an in-house system, we aim to achieve 'uninterrupted IT.' URL: https://www.synx.co.jp

Contact for Inquiries Regarding This Matter

SynX Inc. Public Relations Department Email: [email protected]