Upload
lytram
View
214
Download
1
Embed Size (px)
Citation preview
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
International Workshop on CyberSecurity with UNSW, 2015 July 8th
��How much is your phone-number, living address or date of your birth ?�
(&)�'+�,#('� (*�%��$#'!�)�*+('�%�#��',#,0�#' (*&�,#('��
'EK?9>?�/�'1.�%����/��'OKI>K1D?L����%/%0����@E?DJMEHA�M?J>������0ECE>?I7�%/$%'�3����������!NJ;HD7B�,> �IJK:;DJ�E<�'OKI>K�1D?L���������������%//,��%/���%/)�-/���"!��
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 2
! .;9;DJ�%D9?:;DJ�7HEKD:�,;HIED7B�%D<EHC7J?ED�(;7A7=;�• &7F7D�,;DI?ED�/;HL?9;�5&,������ )7O��:L7D9;:�,;HI?IJ;DJ�0>H;7J6�• �;D;II;�5&,��!:K97J?ED����� &KBO�7�A?D:�E<�%DI?:;H�0>H;7J6�• 07H=;J�51/��.;J7?BI����� &7D��,+/ %E0�)7BM7H;6�
! �O8;H�.?IA�%DIKH7D9;��• ���� �FH��<HEC��%1 �%#�&,�
• 4;J�7�IC7BB�8KI?D;II�7J����� )7H��• ���� ";8��<HEC�0EAOE�)7H?D;���*?9>?:E�"?H;�%DIKH7D9;��E��(J:��
! �ECF;DI7J?ED�?D�,;HIED7B�%:;DJ?T78B;�%D<EHC7J?ED�(;7A7=;�• &*/�� 7C7=;�+F;H7J?ED�&+��)E:;B�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�5&,�����6�• �FFB?97J?ED�E<�&+�CE:;B�7D:�?JI�B?C?J7J?ED��#7F�<HEC�.;7B��
Todays’ talk�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 3
! %D<EHC7J?ED��H;79>�?D�&7F7D�,;DI?ED�/;HL?9;�• 0OF?97B�J7H=;J;:�7JJ79A�8KJ�97J7IJHEF>?9�>7HC��
�� 07H=;J;:�!�C7?B��� ,�I�?D�&,/�7H;�?D<;9J;:�8O�)7BM7H;��� �JJ79A;HI�=7?D�J>;�9H?J?97B�?D<E��2?7�?D<;9J;:�,���� 0>;�9EDT:;DJ?7B�?D<E��?I�B;7A;:�����������F;EFB;�?D<EH�5DE�F7IIMEH:6�
3. The Compensation in Real World and Analysis�
Japan Pension Service Information Breach 2015 May�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 4
! !N7CFB;����;D;II;������&KBO�• ��"7CEKI�;:K97J?ED7B�9ECF7DO��• ��IJ7W�8H?D=�EKJ�J>;���)�9B?;DJQI�:7J7�<EH�=7?D?D=�CED;O�• �;D;II;�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�7D:�JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���
! 0>;�IEC;�E<�L?9J?CI�>7L;�S9EBB;9J?L;�B7MIK?JU5cbde6��• 0>;�F7HJ?9?F7DJI�?D�9EBB;9J?L;�B7MIK?J�H;GK;IJ�������4;D�F;H�F;HIED�7I�J>;�9ECF;DI7J?ED�������4;D�?I�J>;�<;;�E<�B7MO;HI���
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 5
! !N7CFB;���07H=;J].;J7?BI^�����&�*��• %D<EHC7J?ED�8H;79>�97KI;:�8O�,+/�C7BM7H;�• ��)�9KIJEC;HIQ�F;HIED7B�?D<E��B;7A;:�• ��)�9KIJEC;HIQ�9H;:?J�97H:�?D<E��B;7A;:�
• )7DO��B7II��9J?ED����0>;�JOF;�E<�9EBB;9J?L;�B7MIK?J���
• %D�";8�������J>;�JEJ7B�9EIJ�E<�9EKDJ;HC;7IKH;�?I�����)���
• %D�)7H9>������07H=;J�7=H;;�?D�9EKHJ�JE�F7O����)�?D�:7J7�8H;79>�B7MIK?J�7D:�J7H=;J�9ECF;DI7J;�KF�JE��������<EH�J>;�:7C7=;�E�L?9J?CI��
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:X�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 6
! �O8;H�%DIKH7D9;�?D�&7F7D�• !N7CFB;Z0EA?E�)7H?D;�,%%�(;7A7=;�%DIKH7D9;������";8��
• ��!�%� (&)�'+�,#('� (+,���'�#��',���+)('+�� (+,�
• ��!�%� (&)�'+�,#('� (+,Z/KFFEHJ�J>;�9EIJ�H;B7J;:�JE�B;=7B�?IIK;�• �EL;H7=;Z�)�[�����4;D�
• �'�#��',���+)('+�� (+,Z/KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;�• �EL;H7=;Z�)�[����4;D�
3. The Compensation in Real World and Analysis�
Cyber Insurance�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 7
! ,>OI?97B�%DIKH7D9;�5(ED=�>?IJEHO�)7JKH;:6�• �7H 2;>?9B;�57=7?DIJ��99?:;DJI <EH�.;F;7H?D=6�• 0H7L;B��57=7?DIJ�J>;<J HE88;HO6�• $;7BJ>�57=7?DIJ�/?9A <EH�);:?97B� E9JEH6�
! �O8;H�%DIKH7D9;�• "EH�M>7J���• .;B7J;:�JE�,H?9;�E<�EKH�F;HIED7B�?D<EHC7J?ED�
• ,>ED;�DKC8;H�• !�)7?B�7::H;II�• �?HJ>:7O�• $;7BJ>��ED:?J?ED�;J9\�
INSURANCE�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 8
! 0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�• %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�4!0��
• ��+,��/�&)%���'���#.#%�,*#�%+����#���,"���(&)�'+�,#('��• *EJ�IE�BED=�>?IJEHO�O;J�
• /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�
• �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�• �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 9
! +KH�.;I;7H9>Z����7I;I�/JK:O]����R����^�• �L;H7=;Z�����O;D]0>;��L;H7=;�E<�&+�)E:;BZ)EH;�J>7D�������4;D^�• �99EH:?D=�JE�EKH�=H7F>?97B�7D7BOI?I�C7@EH?JO�E<�9ECF;DI7J?EDI�7H;�����O;D�R������O;D��
The Analysis of Compensation in Real World PART1�3. The Compensation in Real World and Analysis�
0
2,000
4,000
6,000
8,000
10,000
12,000
2001/04 2004/01 2006/10 2009/07 2012/04 2014/12 2017/09
�������
In this graph, more than 10,000 yen are plotted as 10,000 yen.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 10
! %<�M;�I;;�IF;9?T9�97I;I]$?=>�9ECF;DI7J?EDY�?L?B�0H?7B^\�• %D�9?L?B�JH?7B�97I;�CEH;�J>7D������O;D�?I�F7?:�EDBO�TD7D9?7B�?DIJ?JKJ?ED�7D:�9?L?B�JH?7B�97I;�F7O�CEH;�J>7D�������O;D�
The Analysis of Compensation in Real World PART1�
Year� Company� Actual Cost� JO model�2002� TBC� 35,000 Yen 66,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen 2009� Mitsubishi UFJ Securities� 10,000 Yen 180,000 Yen 2009� Alico Japan� 10,000 Yen 26,000 Yen
Year� Company� Actual Cost� JO model�1998� Uzi City� 15,000 Yen 66,000 Yen 1998� Waseda University� 5,000 Yen 606,000 Yen 2002� TBC� 35,000 Yen 66,000 Yen 2004� Yahoo BB!� 6,000 Yen 12,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen
High Comp.�
Lawsuit�
3. The Compensation in Real World and Analysis�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 11
! .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
• %J�;L7BK7J;I�9EIJ�;W;9J?L;�I;9KH?JO�
• �7I?9��ED9;FJ���/;9KH?JO�%DL;IJC;DJ����(!���/(!�V��(+�
• �(! �� ��DDK7B�(EII�!NF;9J7D9O�
• /(! �� �/?D=B;�(EII�!NF;9J7D9O�
• �(+ �� ��DDK7B�.7J;�E<�+99KHH;D9;�
! .+/%�?I�L;HO�FEFKB7H�9ED9;FJ�?D�I;9KH?JO�9EDIKBJ7J?ED�������������������� ������������������������������������
Related Research (ROSI)�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 12
! /;9KH?JO�"?D7D9?7B�)E:;B�
�� .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
�� &+�)E:;B��Xa�!NFB7?D�(7J;H�
• 3?J>�78EL;�CE:;B�I;9KH?JO�C7D7=;HI�97B9KB7J;�J>;�9EIJ�E<�I;9KH?JO�?D9?:;DJ�7D:�9ECF;DI7J?ED�<;;�����BIE�9>EEI;�J>;�H?IA�C7D7=;C;DJ�IJH7J;=O���H?IA�799;FJ7D9;�H?IA�7LE?:7D9;�H?IA�H;:K9J?ED�H?IA�JH7DI<;H;D9;���
• �O8;H�?DIKH7D9;�?I�9KHH;DJBO�>7L;�8;9EC;�FEFKB7H�7D:�?J�?I�7�C7@EH�C;J>E:�7I�7�H?IA�JH7DI<;H;D9;�](7J>7C���37JA?DI�FE?DJ�EKJ�J>7J�?DIKH7D9;�?I�KI;<KB�7I�SB7IJ�B?D;�E<�:;<;DI;U��^�
• Latham & Watkins(2014) • Cyber insurance: A last line of defense when technology fails.
Related Research�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 13
! 3>7J�?I�&+�)E:;B��• �*/�� 7C7=;��F;H7J?ED��(��%�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�• &*/��:;L;BEF;:�J>?I�CE:;B�?D�������• %J�?I�9ECCEDBO�KI;:�?D:;N�?D�79JK7B�I;9KH?JO�9EDIKBJ7J?ED�8;97KI;�E<�J>;�9EDL;D?;D9;�E<�J>?I�CE:;B�
! �8EKJ�&*/��• ��������� ������������� ��� ��• &*/��FHECEJ;I�I;9KH?JO�IKFFEHJ�7D:�I;9KH?JO�H;I;7H9>�JE�;79>�EH=7D?P7J?ED�7D:�J>;O�FK8B?I>;I�7�BEJ�E<�H;I;7H9>�F7F;H��
• �BIE�&*/��>EB:I��0"�/!�KH?JO��+*J;IJ��<7CEKI��0"�?D�&7F7D���
What is JO Model?�2. What is JO Model? �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 14
! !L7BK7J?ED�!GK7J?ED�
���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^����������( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
What is JO Model?�2. What is JO Model? �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 15
! "79JEH��Z27BK;�E<�,;HIED7B�%D<EHC7J?ED�(;7A;:�
The Factors of JO Model�2. What is JO Model? �
!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V�/E9?7B�.;IFEDI?8?B?JO� ;=H;;�V�,EIJ�%D9?:;DJ�.;IFEDI;��FFH7?I7B�
��%-��( ���*+('�%��' (�����$�����27BK;�E<��7I?9�%D<E� �V� ;=H;;�E<�%D<E��/;DI?J?L?JO�V� ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B �
! 27BK;�E<��7I?9�%D<E��Z����4;D�
! ;=H;;�E<�%D<E��/;DI?J?L?JOZ�!"#( 10↑#−1 + 5↑'−1 ) �! ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B�
Degree of Ease in Identifying Individual�
Name AND Address� 6�Name OR �Address + Phone Number�� 3�
Others� 1�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 16
! "79JEH`Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
��
�
The Factors of JO Model�2. What is JO Model? �
Social Responsibility Degree�
Higher than Normal� 2�Normal� 1�
Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 17
! "79JEH�Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
��
�
The Factors of JO Model�2. What is JO Model? �
Post Incident Response Appraisal�
Inappropriate� 2�Normal� 1� It is judged based on qualitative
reasons such as “response speed” and “the existence of the inquiry.”�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 18
! �7I;�/JK:OZ&%*/�%D9���)7H9>�������• +FJ?9?7D�I�I>EFI�• �7H:�?D<EHC7J?ED�B;7A7=;�>7FF;D;:�8O�/-(�%D@;9J?ED�
• ��&���� �*���-&��*1���23���-*#,0� (��3��/)#*�,#('�• 0>;�FEII?8?B?JO�E<�������H;9EH:I�B;7A;:�_��9JK7BBO������H;9EH:I�• &%*/�F7OI������4;D�=?<J�97H:��J>;�9EIJ�E<�H;?IIK?D=�F7OC;DJ�97H:�• �9JK7B�9EIJI�7H;�7FFHEN?C7J;BO����C?BB?ED�O;D�
Application of JO Model�2. What is JO Model? �
• +D�0EF�E<�0>7J\�• %DL;IJ?=7J?ED�9EIJI�8O�,"%],"%�"EH;DI?9�%DL;IJ?=7JEH^�7D:�J>;�9EIJ�<EH�I7J?I<O?D=�,�%� //�IJ7D:7H:I�J>;�9EIJ�E<�9KIJEC;H�IKFFEHJ�7D:�?DGK?HO�?I�799KCKB7J;:��
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 19
! �7I;�/JK:OZ&%*/�%D9���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�%�
����
Application of JO Model�2. What is JO Model? �
Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3.�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 20
Application of JO Model�2. What is JO Model? �
39,000=)**+× ()*(-*↑-−- + )↑.−- ) ×.�
! �7I;�/JK:OZ&%*/�%D9��a��������4;D��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$�� ���������V��(�#�%���+)('+#�#%#,0���!*�� ������V��(+,��'�#��',���+)('+���))*�#+�% ������
����
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 21
! #7F��D7BOI?I�8;JM;;D�&+�)E:;B�7D:��9JK7B��ECF;DI7J?ED�• 0>;H;�?I�7D�;DEHCEKI�=7F�8;JM;;D�&+�CE:;B�;IJ?C7J;:�9EIJI�7D:�79JK7B�9ECF;DI7J?ED��
The Analysis of Compensation in Real World PART2�
0
5,000
10,000
15,000
20,000
25,000
30,000
35,000
40,000
45,000
50,000
3. The Compensation in Real World and Analysis�
But, more than 50,000 yen are plotted as 50,000 yen.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 22
! 0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�• %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�?D�&7F7D��
• ,7IJ�;N7CFB;�7D:�9?L?B�JH?7BI�:;9?:;�J>;�9ECF;DI7J?ED��
• /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�
• �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�• �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 23
! 0>?I�.;I;7H9>\�• />EM�>K=;�=7FI�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�9EIJI�;L;D�J>EK=>�IE9?;JO�>7L;�8;9EC;�I;DI?J?L;��JE�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;��
• !L;D�DEM�J>;�7L;H7=;�9ECF;DI7J?ED�9EIJ�?I������O;D�7D:�J>;�C7@EH?JO�?I�M?J>?D�����O;D�JE������O;D���BIE�EDBO�TD7D9?7B�?DIJ?JKJ?ED�EH�J>;�@K:=C;DJ�E<�9?L?B�JH?7BI�B;7:I�CEH;�J>7D������O;D�9ECF;DI7J?ED��
! �O8;H��IIKH7D9;�9EL;HI�JEE�IC7BB�?D�.;7B�MEHB:�%D9?:;DJ�• /KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;X�
• �EL;H7=;Z�)�[����4;D�• �;D;II;�:?:�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�
• JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���
Wrap-Up�4. Wrap-Up �
Thank you for your attention, now Q&A�
Actuary Math
! Cyber Actuary Economics
“Personal Data in CyberSpace
" Gas/Oil in Internet world”
by Makoto SHIROTA �
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
��������� ������������������������������ ������ ��������������
0ECE>?I7�%I>?A7M7]�%//,��%/���%/)�-/���"!^�'EK?9>?�/7AKH7?]'OKI>K�1D?L;HI?JO^�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 26
���%DJHE:K9J?ED�
���3>7J�?I�&+�)E:;B��
���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�
���3H7F�1F�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 27
���%DJHE:K9J?ED�
���3>7J�?I�&+�)E:;B��
���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�
���3H7F�1F�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 28
! 0>;�)EJ?L7J?ED��,;HIED7B�%DJ;H;IJ��• +D;�E<�EKH�?DJ;H;IJI�?I�S0>;�97B9KB7J?ED�CE:;B�E<�9ECF;DI7J?ED�?D�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;U�7D:�CE:;B?D=�H;B7J;:�JE�9ECFKJ;H�I;9KH?JO��]%J�?I�C7@EH�?IIK;I�?D�I;9KH?JO�9EDIKBJ7J?ED^�
! 0>;�E8@;9J?L;I�• 0>;�;L7BK7J?ED�E<�9ECF;DI7J?ED�97B9KB7J?ED�CE:;B�
• 0>?I�H;I;7H9>�;L7BK7J;I�&+�CE:;B�J>7J�?I�KI;:�7I�9ECF;DI7J?ED�97B9KB7J?ED�CE:;B�?D�&7F7D�<HEC��������
• !L;D�J>EK=>�IE9?;JO�8;97C;�I;DI?J?L;�?D������J>;H;�?I�7�=7F�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�7D:�J>?I�H;I;7H9>�>7L;�9EDI?:;H7J?ED��
The Background of Research�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 29
! /;9KH?JO�"?D7D9?7B�)E:;B�
�� .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
�� �O8;H078�
�� &+�)E:;B�
Related Research�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 30
! .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
• %J�;L7BK7J;I�9EIJ�;W;9J?L;�I;9KH?JO�
• �7I?9��ED9;FJ���/;9KH?JO�%DL;IJC;DJ����(!���/(!�V��(+�
• �(! �� ��DDK7B�(EII�!NF;9J7D9O�
• /(! �� �/?D=B;�(EII�!NF;9J7D9O�
• �(+ �� ��DDK7B�.7J;�E<�+99KHH;D9;�
! .+/%�?I�L;HO�FEFKB7H�9ED9;FJ�?D�I;9KH?JO�9EDIKBJ7J?ED�8KJ�?J�?I�>7H:�JE�;IJ?C7J;�;79>�F7H7C;J;H��/(!����(+���
Related Research (ROSI)�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 31
! /;9KH?JO�"?D7D9?7B�)E:;B�
�� .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
�� �O8;H078�
�� &+�)E:;B�
! �O8;H078�?I\�
• ;L;BEF;:�8O�0>;�!9EDEC?IJ�%DJ;BB?=;D9;�1D?J��
• �EIJ�97B9KB7J?ED�CE:;B�E<�?D9?:;DJ�H;IFEDI;�7=7?DIJ�7�F7HJ?9KB7H�J>H;7J��
• 1I;<KB�8;97KI;�?J�FE?DJI�EKJ�J>;�9EIJ�E<�B;=7B�,.�:;F7HJC;DJ�J>7J�KIK7BBO�M;�J;D:�JE�<EH=;J�JE�9EDI?:;H��
Related Research (CyberTab)�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 32
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 33
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 34
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 35
! /;9KH?JO�"?D7D9?7B�)E:;B�
�� .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��
�� �O8;H078�
�� &+�)E:;B��Xa�!NFB7?D�(7J;H�
• �7I;:�ED�J>;�78EL;�CE:;B�I;9KH?JO�C7D7=;HI�97B9KB7J;�J>;�9EIJ�E<�I;9KH?JO�?D9?:;DJ�7D:�9ECF;DI7J?ED�<;;���BIE�J>;O�9>EEI;�J>;�H?IA�C7D7=;C;DJ�IJH7J;=O�H?IA�799;FJ7D9;�H?IA�7LE?:7D9;�H?IA�H;:K9J?ED�H?IA�JH7DI<;H;D9;���
• �O8;H�?DIKH7D9;�?I�9KHH;DJBO�>7L;�8;9EC;�FEFKB7H�7D:�?J�?I�7�C7@EH�C;J>E:�7I�7�H?IA�JH7DI<;H;D9;�](7J>7C���37JA?DI�FE?DJ;:�EKJ�J>7J�?DIKH7D9;�?I�KI;<KB�7I�SB7IJ�B?D;�E<�:;<;DI;U��^�
• Latham & Watkins(2014) Cyber insurance: A last line of defense when technology fails.
Related Research�1. Introduction �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 36
���%DJHE:K9J?ED�
���3>7J�?I�&+�)E:;B��
���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�
���3H7F�1F�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 37
! 3>7J�?I�&+�)E:;B��• &*/�� 7C7=;�+F;H7J?ED�)E:;B�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�• &*/��:;L;BEF;:�J>?I�CE:;B�?D�������• %J�?I�9ECCEDBO�KI;:�?D:;N�?D�79JK7B�I;9KH?JO�9EDIKBJ7J?ED�8;97KI;�E<�J>;�9EDL;D?;D9;�E<�J>?I�CE:;B�
! �8EKJ�&*/��• &7F7D�*;JMEHA�/;9KH?JO��IIE9?7J?ED�• &*/��FHECEJ;I�I;9KH?JO�IKFFEHJ�7D:�I;9KH?JO�H;I;7H9>�JE�;79>�EH=7D?P7J?ED�7D:�J>;O�FK8B?I>;I�7�BEJ�E<�H;I;7H9>�F7F;H��
• �BIE�&*/��>EB:I��0"�/!��+*��<7CEKI��0"�?D�&7F7D7���
What is JO Model?�2. What is JO Model? �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 38
! !L7BK7J?ED�!GK7J?ED�
���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
What is JO Model?�2. What is JO Model? �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 39
! "79JEH��Z27BK;�E<�,;HIED7B�%D<EHC7J?ED�(;7A;:�
The Factors of JO Model�2. What is JO Model? �
!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V�/E9?7B�.;IFEDI?8?B?JO� ;=H;;�V�,EIJ�%D9?:;DJ�.;IFEDI;��FFH7?I7B�
��%-��( ���*+('�%��' (�����$�����27BK;�E<��7I?9�%D<E� �V� ;=H;;�E<�%D<E��/;DI?J?L?JO�V� ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B �
! 27BK;�E<��7I?9�%D<E��Z����4;D�
! ;=H;;�E<�%D<E��/;DI?J?L?JOZ�!"#( 10↑#−1 + 5↑'−1 ) �! ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B�
Degree of Ease in Identifying Individual�
Name AND Address� 6�Name OR �Address + Phone Number�� 3�
Others� 1�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 40
! "79JEH`Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
��
�
The Factors of JO Model�2. What is JO Model? �
Social Responsibility Degree�
Higher than Normal� 2�Normal� 1�
Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 41
! "79JEH�Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �
��
�
The Factors of JO Model�2. What is JO Model? �
Post Incident Response Appraisal�
Inappropriate� 2�Normal� 1� It is judged based on qualitative
reasons such as “response speed” and “the existence of the inquiry.”�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 42
! �7I;�/JK:OZ&%*/�%D9���)7H9>�������• +FJ?9?7D�I�I>EFI�• �7H:�?D<EHC7J?ED�B;7A7=;�>7FF;D;:�8O�/-(�%D@;9J?ED�
• ��&���� �*���-&��*1���23���-*#,0� (��3��/)#*�,#('�• 0>;�FEII?8?B?JO�E<�������H;9EH:I�B;7A;:�_��9JK7BBO������H;9EH:I�• &%*/�F7OI������4;D�=?<J�97H:��J>;�9EIJ�E<�H;?IIK?D=�F7OC;DJ�97H:�• �9JK7B�9EIJI�7H;�7FFHEN?C7J;BO����C?BB?ED�O;D�
Application of JO Model�2. What is JO Model? �
• +D�0EF�E<�0>7J\�• %DL;IJ?=7J?ED�9EIJI�8O�,"%],"%�"EH;DI?9�%DL;IJ?=7JEH^�7D:�J>;�9EIJ�<EH�I7J?I<O?D=�,�%� //�IJ7D:7H:I�J>;�9EIJ�E<�9KIJEC;H�IKFFEHJ�7D:�?DGK?HO�?I�799KCKB7J;:��
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 43
! �7I;�/JK:OZ&%*/�%D9���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�%�
����
Application of JO Model�2. What is JO Model? �
Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3.�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 44
Application of JO Model�2. What is JO Model? �
39,000=)**+× ()*(-*↑-−- + )↑.−- ) ×.�
! �7I;�/JK:OZ&%*/�%D9��a��������4;D��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$�� ���������V��(�#�%���+)('+#�#%#,0���!*�� ������V��(+,��'�#��',���+)('+���))*�#+�% ������
����
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 45
���%DJHE:K9J?ED�
���3>7J�?I�&+�)E:;B��
���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�
���3H7F�1F�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 46
! 0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�• %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�?D�&7F7D��
• ,7IJ�;N7CFB;�7D:�9?L?B�JH?7BI�:;9?:;�J>;�9ECF;DI7J?ED��
• /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�
• �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�• �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 47
! !N7CFB;����;D;II;�• ��"7CEKI�;:K97J?ED7B�9ECF7DO��• ��IJ7W�8H?D=�EKJ�J>;���)�9B?;DJQI�:7J7�<EH�=7?D?D=�CED;O�• �;D;II;�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�7D:�JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���
! 0>;�IEC;�E<�L?9J?CI�>7L;�9EBB;9J?L;�B7MIK?J��• 0>;�F7HJ?9?F7DJI�?D�9EBB;9J?L;�B7MIK?J�H;GK;IJ�������4;D�F;H�F;HIED�7I�J>;�9ECF;DI7J?ED�������4;D�?I�J>;�<;;�E<�B7MO;HI���
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 48
! !N7CFB;���07H=;J].;J7?BI^�• %D<EHC7J?ED�8H;79>�97KI;:�8O�,+/�C7BM7H;�• ��)�9KIJEC;HIQ�F;HIED7B�?D<E��B;7A;:�• ��)�9KIJEC;HIQ�9H;:?J�97H:�?D<E��B;7A;:�
• )7DO��B7II��9J?ED����0>;�JOF;�E<�9EBB;9J?L;�B7MIK?J���
• %D�";8�������J>;�JEJ7B�9EIJ�E<�9EKDJ;HC;7IKH;�?I�����)���
• %D�)7H9>������07H=;J�7=H;;�?D�9EKHJ�JE�F7O����)�?D�:7J7�8H;79>�B7MIK?J�7D:�J7H=;J�9ECF;DI7J;�KF�JE��������<EH�J>;�:7C7=;�E�L?9J?CI��
3. The Compensation in Real World and Analysis�
0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 49
! %D<EHC7J?ED��H;79>�?D�&7F7D�,;DI?ED�/;HL?9;�• 0OF?97B�J7H=;J;:�7JJ79A�8KJ�97J7IJHEF>?9�>7HC��
�� 07H=;J;:�!�C7?B��� ,�I�?D�&,/�7H;�?D<;9J;:�8O�)7BM7H;��� �JJ79A;HI�=7?D�J>;�9H?J?97B�?D<E��2?7�?D<;9J;:�,���� 0>;�9EDT:;DJ?7B�?D<E��?I�B;7A;:��
3. The Compensation in Real World and Analysis�
Japan Pension Service Information Breach�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 50
! �O8;H�%DIKH7D9;�?D�&7F7D�• !N7CFB;Z0EA?E�)7H?D;�,%%�(;7A7=;�%DIKH7D9;�
• ��!�%� (&)�'+�,#('� (+,���'�#��',���+)('+�� (+,�
• ��!�%� (&)�'+�,#('� (+,Z/KFFEHJ�J>;�9EIJ�H;B7J;:�JE�B;=7B�?IIK;�• �EL;H7=;Z�)�[�����4;D�
• �'�#��',���+)('+�� (+,Z/KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;�• �EL;H7=;Z�)�[����4;D�
3. The Compensation in Real World and Analysis�
Cyber Insurance�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 51
! +KH�.;I;7H9>Z����7I;I�.;I;7H9>]����R����^�• �L;H7=;Z�����O;D]0>;��L;H7=;�E<�&+�)E:;BZ)EH;�J>7D�������4;D^�• �99EH:?D=�JE�EKH�=H7F>?97B�7D7BOI?I�C7@EH?JO�E<�9ECF;DI7J?EDI�7H;�����O;D�R������O;D��
The Analysis of Compensation in Real World PART1�3. The Compensation in Real World and Analysis�
0
2,000
4,000
6,000
8,000
10,000
12,000
2001/04 2004/01 2006/10 2009/07 2012/04 2014/12 2017/09
�������
In this graph, more than 10,000 yen are plotted as 10,000 yen.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 52
! %<�M;�I;;�IF;9?T9�97I;I]$?=>�9ECF;DI7J?EDY�?L?B�0H?7B^\�• %D�9?L?B�JH?7B�97I;�CEH;�J>7D������O;D�?I�F7?:�EDBO�TD7D9?7B�?DIJ?JKJ?ED�7D:�9?L?B�JH?7B�97I;�F7O�CEH;�J>7D�������O;D�
The Analysis of Compensation in Real World PART1�
Year� Company� Actual Cost� JO model�2002� TBC� 35,000 Yen 66,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen 2009� Mitsubishi UFJ Securities� 10,000 Yen 180,000 Yen 2009� Alico Japan� 10,000 Yen 26,000 Yen
Year� Company� Actual Cost� JO model�1998� Uzi City� 15,000 Yen 66,000 Yen 1998� Waseda University� 5,000 Yen 606,000 Yen 2002� TBC� 35,000 Yen 66,000 Yen 2004� Yahoo BB!� 6,000 Yen 12,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen
High Comp.�
Lawsuit�
3. The Compensation in Real World and Analysis�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 53
! #7F��D7BOI?I�8;JM;;D�&+�)E:;B�7D:��9JK7B��ECF;DI7J?ED�• 0>;H;�?I�7D�;DEHCEKI�=7F�8;JM;;D�&+�CE:;B�;IJ?C7J;:�9EIJI�7D:�79JK7B�9ECF;DI7J?ED��
The Analysis of Compensation in Real World PART2�
0
5,000
10,000
15,000
20,000
25,000
30,000
35,000
40,000
45,000
50,000
3. The Compensation in Real World and Analysis�
But, more than 50,000 yen are plotted as 50,000 yen.
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 54
���%DJHE:K9J?ED�
���3>7J�?I�&+�)E:;B��
���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�
���3H7F�1F�
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 55
! ��,KHFEI;�E<�&+�CE:;B�• +F;H7J?ED7B�)E:;B�• *EHC7J?L;�)E:;B�
! ,HEFEI7B�7I�7�*EHC7J?L;�)E:;B�• /;7H9>78?B?JO �Z%D<EHC7J?ED�;NJH79J?ED�M?J>�/*/Y+/%*0�• �7D9;B78?B?JO �Z0>;�;7I;�E<�9>7D=?D=�?D<EHC7J?ED];N��8?HJ>:7O^�• .;JH?;L78?B?JO �Z0>;�9EL;H7=;�E<�J>;�?D<EHC7J?ED�B;7A;:�
Consideration of Personal Identifiable Information Leakage �4. Wrap-Up �
Copyright © 2015 Tomohisa Ishikawa All rights reserved. 56
! %D�J>?I�.;I;7H9>\�• 0>?I�H;I;7H9>�L;H?T;I��>K=;�=7FI�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�9EIJI�;L;D�J>EK=>�IE9?;JO�>7L;�8;9EC;�I;DI?J?L;��JE�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;��
• !L;D�DEM�J>;�7L;H7=;�9ECF;DI7J?ED�9EIJ�?I������O;D�7D:�J>;�C7@EH?JO�?I�M?J>?D�����O;D�JE������O;D���BIE�EDBO�TD7D9?7B�?DIJ?JKJ?ED�EH�J>;�@K:=C;DJ�E<�9?L?B�JH?7BI�B;7:I�CEH;�J>7D������O;D�9ECF;DI7J?ED��
Wrap-Up�4. Wrap-Up �
Q&A�
Thank you for your time & attention Feel Free to Contact Us �