The government said it will develop cyber threat-hunting methods for power and telecom operators, with Defence Ministry help available on request.
Japan plans to expand cybersecurity work in fiscal 2027 so officials can look for attackers that may already be inside systems run by critical infrastructure operators, the Japan Times reported, citing Jiji. The focus includes power utilities and telecommunications companies.
The government intends to develop detection methods and share them with private operators to reduce the risk of shutdowns in a contingency. Threat hunting is part of active cyber defence. Related legislation took effect on Thursday, the paper said.
The National Cybersecurity Office is to recreate suspected attacks in a virtual environment and test detection methods that companies can use. The Defence Ministry will also be able to send personnel to operators that request help, drawing on work done for Self-Defense Forces networks.
NTT Data Japan has run internal threat hunting since 2024, searching logs even without alerts, the Japan Times reported. Official Yusuke Nakajima said wider use would require showing managers that the work is cost-effective.
The measures are planned for the fiscal 2027 budget cycle. The report did not give a spending figure or name which operators would be first in line.