Learn in the textbookGuidelines and Standards
DefinitionThe Cybersecurity Management Guidelines (サイバーセキュリティ経営ガイドライン) are guidelines for executives, compiled by METI and IPA so that preparation against cyberattacks is pursued as a management issue.
ExplanationIt consists of 3 principles that executives should keep in mind and 10 key items (重要 10 項目) they should instruct the people responsible for measures, such as the CISO (chief information security officer), to carry out. Spending on measures is treated as an investment in the future.
AnalogyIt is like a ship's sailing plan. The captain may hand steering and lookout to the crew, but decides where to head and which dangers to prepare for, and answers for those choices.
Memory hookThe word "management" (経営) in the middle of the name tells you who the reader is. Picture it as a document kept on the CEO's desk.