"As MUFG expands its business as a ‘financial and digital platformer,’ the number and variety of connections with partner organizations are increasing. In this environment, it is crucial to monitor our security posture and that of our partners to support business growth while protecting our customers."

"We have been conducting self-assessments using proprietary checklists, but we wanted to achieve a more objective understanding by integrating facts and third-party evaluations."

"In risk communication, achieving mutual understanding between stakeholders with different perspectives and roles is often difficult. Therefore, we sought a tool that could create a common understanding across various domestic and international stakeholders."

"NRI Secure’s extensive knowledge of security ratings and attack surface management (ASM) was invaluable, and their continuous support in interpreting diagnostic results played a key role in our decision."

"Moreover, SecureSketCH was easy to implement because it requires no installation and supports multiple languages, making it ideal for use across our network of affiliates and third parties."

"Secure SketCH is intuitive and easy to use, with clear and structured guides that make it accessible not just internally but also for our partner organizations. Given the global shortage of cybersecurity talent, it’s essential that any tool we adopt is user-friendly and has broad applicability across teams."

"The fact that Secure SketCH supports Japanese and provides expert interpretations of SecurityScorecard results makes it a thoughtful service that addresses users’ needs."

"Regarding SecurityScorecard, there were very few publicly available examples of its implementation within Japan, which made it challenging for stakeholders to establish a shared understanding of how to interpret the automated cyber rating (third-party evaluation) results and recognize their value."

"By referencing diagnostic reports released by SecurityScorecard for Nikkei 225 companies, we were able to benchmark our organization’s position and trends relative to others, effectively communicating the benefits of automated assessments within our risk management discussions."

"By supplementing traditional self-assessments with automated diagnostics from Secure SketCH, we can now accurately detect vulnerabilities and configuration errors, gaining a clear understanding of our actual security posture.

Furthermore, the visibility provided by third-party evaluations in the form of scores and ratings offers an objective perspective. Having this fact-based information greatly facilitates reporting to management and discussions with stakeholders, significantly improving our risk communication."

"With Secure SketCH’s automated assessments, we can easily benchmark ourselves against industry-average security scores and peer institutions. This capability provides a clear overview of our company’s standing.

Financial institutions must carefully consider whether their risk management meets customers’ and society’s high expectations. I’ve become increasingly aware of the necessity for continuous monitoring, not just from a cybersecurity perspective but also from a reputational viewpoint.

Moreover, Secure SketCH supports multiple languages, including English and Chinese, making it a valuable tool for assessing overseas offices and facilitating global communication in the future.

When we’ve had questions about product specifications or assessment results, NRI Secure has provided ongoing, detailed support, which has been incredibly helpful. When selecting security solutions, we look for vendors with deep security expertise and the ability to simplify complex technical concepts. NRI Secure has fully met our expectations, and we’re grateful for their support."

"Following the G7 Fundamental Elements for Third-Party Cyber Risk Management in the Financial Sector, MUFG reviews control measures for monitoring third-party cyber risks. In the future, we envision leveraging Secure ketCH’s automated assessments and SecurityScorecard for cyber-risk monitoring of critical third-party service providers. To realize this, we hope NRI Secure will continue providing advanced cybersecurity expertise, insights from other client engagements, and ongoing support related to security rating services."