Thank you for your continued use of Assured.

We at Assured are dedicated to constantly improving the quality of our services, and in line with this commitment, we are making important revisions to our security assessment process.

Effective from August 22, 2024, at 18:00 (JST), we will be implementing changes to some of the content in our assessment items. We understand that this update may require additional efforts on your part, and we sincerely appreciate your understanding and cooperation.

Background and Summary of Revisions

For a more appropriate security assessment, we periodically revise the assessment items in response to evolving security risks and guideline updates.

In this revision (v2024.2), the changes aim to:

Address our users’ feedback regarding specific assessment items
Respond to recent security-related trends
Improve the quality of the assessment

Summary of Revisions

The main changes are as follows:

1．Addressing User Feedback

Added NEW questions regarding data separation in a multi-tenant SaaS environment.
Added questions about key length and key management for encryption (CR-2, CR-3).
Added questions about malware countermeasures on development and operational devices (OP-11).
Added questions about user permissions in SaaS applications (AT-2).

２．Responding to Trends

Added NEW questions about AI governance.
Added questions about secure coding and understanding the use of OSS (SY-3).

３．Further Improving Assessment Quality

Revised questions to align with the diversification of authentication methods (AC-15, AC-17, AC-18).
Increased the number of selectable response items to improve the efficiency of visualising response statuses.

(Note: The codes in parentheses refer to the items in the current assessment.)

List of Revised Items (Comparison Table)

Please refer to the comparison table, which will be available on the screen after logging in your Assured account.

Important Notes for Responding Revised Assessment:

Our service will be temporarily suspended from 18:00 to 21:00(JST) on August 22, 2024. A maintenance screen will be displayed during this period.
Post-revision, editing responses will be temporarily unavailable while we migrate the response information. Viewing the assessment responses will still be accessible. The migration process may take several hours.
For those items that have been revised, some responses will need to be re-answered. You will not be able to request a review until all the necessary items have been addressed. Please request a review after completing the required responses.
For already submitted assessment requests, there is no need to re-answer the revised items. However, for NEW assessment requests, all revised items must be answered before requesting a review.
For service user companies' accounts, in the transaction page for submitted assessment requests, your previously submitted answers will be displayed. This also applies to shared assessment responses, including those shared via request acceptance forms.

For inquiries regarding our services, please contact us via the chat icon in the bottom right corner or at the following email address.

Best Regards,

The Assured Team

assured-cs@bizreach.co.jp