57
Copyright © 2015 Tomohisa Ishikawa All rights reserved. International Workshop on CyberSecurity with UNSW, 2015 July 8th How much is your phone-number, living address or date of your birth ? (&)'+,#(' (* %$#'! )*+('% #',#,0 #'(*&,#(' 'EK?9>? /'1.% /'OKI>K1D?L %/%0 @E?DJMEHA M?J> 0ECE>?I7 %/$%'3 !NJ;HD7B ,>IJK:;DJ E< 'OKI>K 1D?L %//, %/ %/) -/ "!

How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

  • Upload
    lytram

  • View
    214

  • Download
    1

Embed Size (px)

Citation preview

Page 1: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved.

International Workshop on CyberSecurity with UNSW, 2015 July 8th

��How much is your phone-number, living address or date of your birth ?�

(&)�'+�,#('� (*�%��$#'!�)�*+('�%�#��',#,0�#' (*&�,#('��

'EK?9>?�/�'1.�%����/��'OKI>K1D?L����%/%0����@E?DJMEHA�M?J>������0ECE>?I7�%/$%'�3����������!NJ;HD7B�,> �IJK:;DJ�E<�'OKI>K�1D?L���������������%//,��%/���%/)�-/���"!��

Page 2: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 2

!  .;9;DJ�%D9?:;DJ�7HEKD:�,;HIED7B�%D<EHC7J?ED�(;7A7=;�•  &7F7D�,;DI?ED�/;HL?9;�5&,������ )7O��:L7D9;:�,;HI?IJ;DJ�0>H;7J6�•  �;D;II;�5&,��!:K97J?ED����� &KBO�7�A?D:�E<�%DI?:;H�0>H;7J6�•  07H=;J�51/��.;J7?BI����� &7D��,+/ %E0�)7BM7H;6�

!  �O8;H�.?IA�%DIKH7D9;��•  ���� �FH��<HEC��%1 �%#�&,�

•  4;J�7�IC7BB�8KI?D;II�7J����� )7H��•  ���� ";8��<HEC�0EAOE�)7H?D;���*?9>?:E�"?H;�%DIKH7D9;��E��(J:��

!  �ECF;DI7J?ED�?D�,;HIED7B�%:;DJ?T78B;�%D<EHC7J?ED�(;7A7=;�•  &*/�� 7C7=;�+F;H7J?ED�&+��)E:;B�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�5&,�����6�•  �FFB?97J?ED�E<�&+�CE:;B�7D:�?JI�B?C?J7J?ED��#7F�<HEC�.;7B��

Todays’ talk�

Page 3: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 3

!  %D<EHC7J?ED��H;79>�?D�&7F7D�,;DI?ED�/;HL?9;�•  0OF?97B�J7H=;J;:�7JJ79A�8KJ�97J7IJHEF>?9�>7HC��

��  07H=;J;:�!�C7?B���  ,�I�?D�&,/�7H;�?D<;9J;:�8O�)7BM7H;���  �JJ79A;HI�=7?D�J>;�9H?J?97B�?D<E��2?7�?D<;9J;:�,����  0>;�9EDT:;DJ?7B�?D<E��?I�B;7A;:�����������F;EFB;�?D<EH�5DE�F7IIMEH:6�

3. The Compensation in Real World and Analysis�

Japan Pension Service Information Breach 2015 May�

Page 4: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 4

!  !N7CFB;����;D;II;������&KBO�•  ��"7CEKI�;:K97J?ED7B�9ECF7DO��•  ��IJ7W�8H?D=�EKJ�J>;���)�9B?;DJQI�:7J7�<EH�=7?D?D=�CED;O�•  �;D;II;�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�7D:�JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���

!  0>;�IEC;�E<�L?9J?CI�>7L;�S9EBB;9J?L;�B7MIK?JU5cbde6��•  0>;�F7HJ?9?F7DJI�?D�9EBB;9J?L;�B7MIK?J�H;GK;IJ�������4;D�F;H�F;HIED�7I�J>;�9ECF;DI7J?ED�������4;D�?I�J>;�<;;�E<�B7MO;HI���

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 5: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 5

!  !N7CFB;���07H=;J].;J7?BI^�����&�*��•  %D<EHC7J?ED�8H;79>�97KI;:�8O�,+/�C7BM7H;�•  ��)�9KIJEC;HIQ�F;HIED7B�?D<E��B;7A;:�•  ��)�9KIJEC;HIQ�9H;:?J�97H:�?D<E��B;7A;:�

• )7DO��B7II��9J?ED����0>;�JOF;�E<�9EBB;9J?L;�B7MIK?J���

•  %D�";8�������J>;�JEJ7B�9EIJ�E<�9EKDJ;HC;7IKH;�?I�����)���

•  %D�)7H9>������07H=;J�7=H;;�?D�9EKHJ�JE�F7O����)�?D�:7J7�8H;79>�B7MIK?J�7D:�J7H=;J�9ECF;DI7J;�KF�JE��������<EH�J>;�:7C7=;�E�L?9J?CI��

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:X�

Page 6: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 6

!  �O8;H�%DIKH7D9;�?D�&7F7D�•  !N7CFB;Z0EA?E�)7H?D;�,%%�(;7A7=;�%DIKH7D9;������";8��

•  ��!�%� (&)�'+�,#('� (+,���'�#��',���+)('+�� (+,�

•  ��!�%� (&)�'+�,#('� (+,Z/KFFEHJ�J>;�9EIJ�H;B7J;:�JE�B;=7B�?IIK;�•  �EL;H7=;Z�)�[�����4;D�

•  �'�#��',���+)('+�� (+,Z/KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;�•  �EL;H7=;Z�)�[����4;D�

3. The Compensation in Real World and Analysis�

Cyber Insurance�

Page 7: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 7

!  ,>OI?97B�%DIKH7D9;�5(ED=�>?IJEHO�)7JKH;:6�•  �7H 2;>?9B;�57=7?DIJ��99?:;DJI <EH�.;F;7H?D=6�•  0H7L;B��57=7?DIJ�J>;<J HE88;HO6�• $;7BJ>�57=7?DIJ�/?9A <EH�);:?97B� E9JEH6�

!  �O8;H�%DIKH7D9;�•  "EH�M>7J���•  .;B7J;:�JE�,H?9;�E<�EKH�F;HIED7B�?D<EHC7J?ED�

•  ,>ED;�DKC8;H�•  !�)7?B�7::H;II�•  �?HJ>:7O�•  $;7BJ>��ED:?J?ED�;J9\�

INSURANCE�

Page 8: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 8

!  0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�•  %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�4!0��

•  ��+,��/�&)%���'���#.#%�,*#�%+����#���,"���(&)�'+�,#('��•  *EJ�IE�BED=�>?IJEHO�O;J�

•  /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�

•  �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�•  �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 9: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 9

!  +KH�.;I;7H9>Z����7I;I�/JK:O]����R����^�•  �L;H7=;Z�����O;D]0>;��L;H7=;�E<�&+�)E:;BZ)EH;�J>7D�������4;D^�•  �99EH:?D=�JE�EKH�=H7F>?97B�7D7BOI?I�C7@EH?JO�E<�9ECF;DI7J?EDI�7H;�����O;D�R������O;D��

The Analysis of Compensation in Real World PART1�3. The Compensation in Real World and Analysis�

0

2,000

4,000

6,000

8,000

10,000

12,000

2001/04 2004/01 2006/10 2009/07 2012/04 2014/12 2017/09

�������

In this graph, more than 10,000 yen are plotted as 10,000 yen.

Page 10: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 10

!  %<�M;�I;;�IF;9?T9�97I;I]$?=>�9ECF;DI7J?EDY�?L?B�0H?7B^\�•  %D�9?L?B�JH?7B�97I;�CEH;�J>7D������O;D�?I�F7?:�EDBO�TD7D9?7B�?DIJ?JKJ?ED�7D:�9?L?B�JH?7B�97I;�F7O�CEH;�J>7D�������O;D�

The Analysis of Compensation in Real World PART1�

Year� Company� Actual Cost� JO model�2002� TBC� 35,000 Yen 66,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen 2009� Mitsubishi UFJ Securities� 10,000 Yen 180,000 Yen 2009� Alico Japan� 10,000 Yen 26,000 Yen

Year� Company� Actual Cost� JO model�1998� Uzi City� 15,000 Yen 66,000 Yen 1998� Waseda University� 5,000 Yen 606,000 Yen 2002� TBC� 35,000 Yen 66,000 Yen 2004� Yahoo BB!� 6,000 Yen 12,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen

High Comp.�

Lawsuit�

3. The Compensation in Real World and Analysis�

Page 11: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 11

!  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

•  %J�;L7BK7J;I�9EIJ�;W;9J?L;�I;9KH?JO�

•  �7I?9��ED9;FJ���/;9KH?JO�%DL;IJC;DJ����(!���/(!�V��(+�

•  �(! �� ��DDK7B�(EII�!NF;9J7D9O�

•  /(! �� �/?D=B;�(EII�!NF;9J7D9O�

•  �(+ �� ��DDK7B�.7J;�E<�+99KHH;D9;�

!  .+/%�?I�L;HO�FEFKB7H�9ED9;FJ�?D�I;9KH?JO�9EDIKBJ7J?ED�������������������� ������������������������������������

Related Research (ROSI)�1. Introduction �

Page 12: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 12

!  /;9KH?JO�"?D7D9?7B�)E:;B�

��  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

��  &+�)E:;B��Xa�!NFB7?D�(7J;H�

• 3?J>�78EL;�CE:;B�I;9KH?JO�C7D7=;HI�97B9KB7J;�J>;�9EIJ�E<�I;9KH?JO�?D9?:;DJ�7D:�9ECF;DI7J?ED�<;;�����BIE�9>EEI;�J>;�H?IA�C7D7=;C;DJ�IJH7J;=O���H?IA�799;FJ7D9;�H?IA�7LE?:7D9;�H?IA�H;:K9J?ED�H?IA�JH7DI<;H;D9;���

•  �O8;H�?DIKH7D9;�?I�9KHH;DJBO�>7L;�8;9EC;�FEFKB7H�7D:�?J�?I�7�C7@EH�C;J>E:�7I�7�H?IA�JH7DI<;H;D9;�](7J>7C���37JA?DI�FE?DJ�EKJ�J>7J�?DIKH7D9;�?I�KI;<KB�7I�SB7IJ�B?D;�E<�:;<;DI;U��^�

•  Latham & Watkins(2014) •  Cyber insurance: A last line of defense when technology fails.

Related Research�1. Introduction �

Page 13: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 13

! 3>7J�?I�&+�)E:;B��•  �*/�� 7C7=;��F;H7J?ED��(��%�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�•  &*/��:;L;BEF;:�J>?I�CE:;B�?D�������•  %J�?I�9ECCEDBO�KI;:�?D:;N�?D�79JK7B�I;9KH?JO�9EDIKBJ7J?ED�8;97KI;�E<�J>;�9EDL;D?;D9;�E<�J>?I�CE:;B�

!  �8EKJ�&*/��•  ��������� ������������� ��� ��•  &*/��FHECEJ;I�I;9KH?JO�IKFFEHJ�7D:�I;9KH?JO�H;I;7H9>�JE�;79>�EH=7D?P7J?ED�7D:�J>;O�FK8B?I>;I�7�BEJ�E<�H;I;7H9>�F7F;H��

•  �BIE�&*/��>EB:I��0"�/!�KH?JO��+*J;IJ��<7CEKI��0"�?D�&7F7D���

What is JO Model?�2. What is JO Model? �

Page 14: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 14

!  !L7BK7J?ED�!GK7J?ED�

���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^����������( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

What is JO Model?�2. What is JO Model? �

Page 15: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 15

!  "79JEH��Z27BK;�E<�,;HIED7B�%D<EHC7J?ED�(;7A;:�

The Factors of JO Model�2. What is JO Model? �

!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V�/E9?7B�.;IFEDI?8?B?JO� ;=H;;�V�,EIJ�%D9?:;DJ�.;IFEDI;��FFH7?I7B�

��%-��( ���*+('�%��' (�����$�����27BK;�E<��7I?9�%D<E� �V� ;=H;;�E<�%D<E��/;DI?J?L?JO�V� ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B �

!  27BK;�E<��7I?9�%D<E��Z����4;D�

!  ;=H;;�E<�%D<E��/;DI?J?L?JOZ�!"#( 10↑#−1 + 5↑'−1 ) �!  ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B�

Degree of Ease in Identifying Individual�

Name AND Address� 6�Name OR �Address + Phone Number�� 3�

Others� 1�

Page 16: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 16

!  "79JEH`Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

��

The Factors of JO Model�2. What is JO Model? �

Social Responsibility Degree�

Higher than Normal� 2�Normal� 1�

Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.

Page 17: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 17

!  "79JEH�Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

��

The Factors of JO Model�2. What is JO Model? �

Post Incident Response Appraisal�

Inappropriate� 2�Normal� 1� It is judged based on qualitative

reasons such as “response speed” and “the existence of the inquiry.”�

Page 18: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 18

!  �7I;�/JK:OZ&%*/�%D9���)7H9>�������• +FJ?9?7D�I�I>EFI�•  �7H:�?D<EHC7J?ED�B;7A7=;�>7FF;D;:�8O�/-(�%D@;9J?ED�

•  ��&���� �*���-&��*1���23���-*#,0� (��3��/)#*�,#('�•  0>;�FEII?8?B?JO�E<�������H;9EH:I�B;7A;:�_��9JK7BBO������H;9EH:I�•  &%*/�F7OI������4;D�=?<J�97H:��J>;�9EIJ�E<�H;?IIK?D=�F7OC;DJ�97H:�•  �9JK7B�9EIJI�7H;�7FFHEN?C7J;BO����C?BB?ED�O;D�

Application of JO Model�2. What is JO Model? �

• +D�0EF�E<�0>7J\�•  %DL;IJ?=7J?ED�9EIJI�8O�,"%],"%�"EH;DI?9�%DL;IJ?=7JEH^�7D:�J>;�9EIJ�<EH�I7J?I<O?D=�,�%� //�IJ7D:7H:I�J>;�9EIJ�E<�9KIJEC;H�IKFFEHJ�7D:�?DGK?HO�?I�799KCKB7J;:��

Page 19: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 19

!  �7I;�/JK:OZ&%*/�%D9���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�%�

����

Application of JO Model�2. What is JO Model? �

Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3.�

Page 20: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 20

Application of JO Model�2. What is JO Model? �

39,000=)**+× ()*(-*↑-−- + )↑.−- ) ×.�

!  �7I;�/JK:OZ&%*/�%D9��a��������4;D��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$�� ���������V��(�#�%���+)('+#�#%#,0���!*�� ������V��(+,��'�#��',���+)('+���))*�#+�% ������

����

Page 21: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 21

!  #7F��D7BOI?I�8;JM;;D�&+�)E:;B�7D:��9JK7B��ECF;DI7J?ED�•  0>;H;�?I�7D�;DEHCEKI�=7F�8;JM;;D�&+�CE:;B�;IJ?C7J;:�9EIJI�7D:�79JK7B�9ECF;DI7J?ED��

The Analysis of Compensation in Real World PART2�

0

5,000

10,000

15,000

20,000

25,000

30,000

35,000

40,000

45,000

50,000

3. The Compensation in Real World and Analysis�

But, more than 50,000 yen are plotted as 50,000 yen.

Page 22: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 22

!  0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�•  %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�?D�&7F7D��

•  ,7IJ�;N7CFB;�7D:�9?L?B�JH?7BI�:;9?:;�J>;�9ECF;DI7J?ED��

•  /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�

•  �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�•  �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 23: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 23

!  0>?I�.;I;7H9>\�•  />EM�>K=;�=7FI�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�9EIJI�;L;D�J>EK=>�IE9?;JO�>7L;�8;9EC;�I;DI?J?L;��JE�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;��

•  !L;D�DEM�J>;�7L;H7=;�9ECF;DI7J?ED�9EIJ�?I������O;D�7D:�J>;�C7@EH?JO�?I�M?J>?D�����O;D�JE������O;D���BIE�EDBO�TD7D9?7B�?DIJ?JKJ?ED�EH�J>;�@K:=C;DJ�E<�9?L?B�JH?7BI�B;7:I�CEH;�J>7D������O;D�9ECF;DI7J?ED��

!  �O8;H��IIKH7D9;�9EL;HI�JEE�IC7BB�?D�.;7B�MEHB:�%D9?:;DJ�•  /KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;X�

•  �EL;H7=;Z�)�[����4;D�•  �;D;II;�:?:�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�

•  JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���

Wrap-Up�4. Wrap-Up �

Page 24: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Thank you for your attention, now Q&A�

Actuary Math

! Cyber Actuary Economics

“Personal Data in CyberSpace

" Gas/Oil in Internet world”

by Makoto SHIROTA �

Page 25: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved.

��������� ������������������������������ ������ ��������������

0ECE>?I7�%I>?A7M7]�%//,��%/���%/)�-/���"!^�'EK?9>?�/7AKH7?]'OKI>K�1D?L;HI?JO^�

Page 26: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 26

���%DJHE:K9J?ED�

���3>7J�?I�&+�)E:;B��

���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�

���3H7F�1F�

Page 27: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 27

���%DJHE:K9J?ED�

���3>7J�?I�&+�)E:;B��

���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�

���3H7F�1F�

Page 28: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 28

!  0>;�)EJ?L7J?ED��,;HIED7B�%DJ;H;IJ��• +D;�E<�EKH�?DJ;H;IJI�?I�S0>;�97B9KB7J?ED�CE:;B�E<�9ECF;DI7J?ED�?D�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;U�7D:�CE:;B?D=�H;B7J;:�JE�9ECFKJ;H�I;9KH?JO��]%J�?I�C7@EH�?IIK;I�?D�I;9KH?JO�9EDIKBJ7J?ED^�

!  0>;�E8@;9J?L;I�•  0>;�;L7BK7J?ED�E<�9ECF;DI7J?ED�97B9KB7J?ED�CE:;B�

•  0>?I�H;I;7H9>�;L7BK7J;I�&+�CE:;B�J>7J�?I�KI;:�7I�9ECF;DI7J?ED�97B9KB7J?ED�CE:;B�?D�&7F7D�<HEC��������

•  !L;D�J>EK=>�IE9?;JO�8;97C;�I;DI?J?L;�?D������J>;H;�?I�7�=7F�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�7D:�J>?I�H;I;7H9>�>7L;�9EDI?:;H7J?ED��

The Background of Research�1. Introduction �

Page 29: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 29

!  /;9KH?JO�"?D7D9?7B�)E:;B�

��  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

��  �O8;H078�

��  &+�)E:;B�

Related Research�1. Introduction �

Page 30: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 30

!  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

•  %J�;L7BK7J;I�9EIJ�;W;9J?L;�I;9KH?JO�

•  �7I?9��ED9;FJ���/;9KH?JO�%DL;IJC;DJ����(!���/(!�V��(+�

•  �(! �� ��DDK7B�(EII�!NF;9J7D9O�

•  /(! �� �/?D=B;�(EII�!NF;9J7D9O�

•  �(+ �� ��DDK7B�.7J;�E<�+99KHH;D9;�

!  .+/%�?I�L;HO�FEFKB7H�9ED9;FJ�?D�I;9KH?JO�9EDIKBJ7J?ED�8KJ�?J�?I�>7H:�JE�;IJ?C7J;�;79>�F7H7C;J;H��/(!����(+���

Related Research (ROSI)�1. Introduction �

Page 31: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 31

!  /;9KH?JO�"?D7D9?7B�)E:;B�

��  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

��  �O8;H078�

��  &+�)E:;B�

!  �O8;H078�?I\�

•  ;L;BEF;:�8O�0>;�!9EDEC?IJ�%DJ;BB?=;D9;�1D?J��

•  �EIJ�97B9KB7J?ED�CE:;B�E<�?D9?:;DJ�H;IFEDI;�7=7?DIJ�7�F7HJ?9KB7H�J>H;7J��

•  1I;<KB�8;97KI;�?J�FE?DJI�EKJ�J>;�9EIJ�E<�B;=7B�,.�:;F7HJC;DJ�J>7J�KIK7BBO�M;�J;D:�JE�<EH=;J�JE�9EDI?:;H��

Related Research (CyberTab)�1. Introduction �

Page 32: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 32

Page 33: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 33

Page 34: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 34

Page 35: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 35

!  /;9KH?JO�"?D7D9?7B�)E:;B�

��  .+/%��.;JKHD�+D�/;9KH?JO�%DL;IJC;DJ��

��  �O8;H078�

��  &+�)E:;B��Xa�!NFB7?D�(7J;H�

•  �7I;:�ED�J>;�78EL;�CE:;B�I;9KH?JO�C7D7=;HI�97B9KB7J;�J>;�9EIJ�E<�I;9KH?JO�?D9?:;DJ�7D:�9ECF;DI7J?ED�<;;���BIE�J>;O�9>EEI;�J>;�H?IA�C7D7=;C;DJ�IJH7J;=O�H?IA�799;FJ7D9;�H?IA�7LE?:7D9;�H?IA�H;:K9J?ED�H?IA�JH7DI<;H;D9;���

•  �O8;H�?DIKH7D9;�?I�9KHH;DJBO�>7L;�8;9EC;�FEFKB7H�7D:�?J�?I�7�C7@EH�C;J>E:�7I�7�H?IA�JH7DI<;H;D9;�](7J>7C���37JA?DI�FE?DJ;:�EKJ�J>7J�?DIKH7D9;�?I�KI;<KB�7I�SB7IJ�B?D;�E<�:;<;DI;U��^�

•  Latham & Watkins(2014) Cyber insurance: A last line of defense when technology fails.

Related Research�1. Introduction �

Page 36: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 36

���%DJHE:K9J?ED�

���3>7J�?I�&+�)E:;B��

���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�

���3H7F�1F�

Page 37: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 37

! 3>7J�?I�&+�)E:;B��•  &*/�� 7C7=;�+F;H7J?ED�)E:;B�<EH�%D:?L?:K7B�%D<EHC7J?ED�(;7A�•  &*/��:;L;BEF;:�J>?I�CE:;B�?D�������•  %J�?I�9ECCEDBO�KI;:�?D:;N�?D�79JK7B�I;9KH?JO�9EDIKBJ7J?ED�8;97KI;�E<�J>;�9EDL;D?;D9;�E<�J>?I�CE:;B�

!  �8EKJ�&*/��•  &7F7D�*;JMEHA�/;9KH?JO��IIE9?7J?ED�•  &*/��FHECEJ;I�I;9KH?JO�IKFFEHJ�7D:�I;9KH?JO�H;I;7H9>�JE�;79>�EH=7D?P7J?ED�7D:�J>;O�FK8B?I>;I�7�BEJ�E<�H;I;7H9>�F7F;H��

•  �BIE�&*/��>EB:I��0"�/!��+*��<7CEKI��0"�?D�&7F7D7���

What is JO Model?�2. What is JO Model? �

Page 38: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 38

!  !L7BK7J?ED�!GK7J?ED�

���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

What is JO Model?�2. What is JO Model? �

Page 39: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 39

!  "79JEH��Z27BK;�E<�,;HIED7B�%D<EHC7J?ED�(;7A;:�

The Factors of JO Model�2. What is JO Model? �

!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V�/E9?7B�.;IFEDI?8?B?JO� ;=H;;�V�,EIJ�%D9?:;DJ�.;IFEDI;��FFH7?I7B�

��%-��( ���*+('�%��' (�����$�����27BK;�E<��7I?9�%D<E� �V� ;=H;;�E<�%D<E��/;DI?J?L?JO�V� ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B �

!  27BK;�E<��7I?9�%D<E��Z����4;D�

!  ;=H;;�E<�%D<E��/;DI?J?L?JOZ�!"#( 10↑#−1 + 5↑'−1 ) �!  ;=H;;�E<�!7I;�?D�%:;DJ?<O?D=�%D:?L?:K7B�

Degree of Ease in Identifying Individual�

Name AND Address� 6�Name OR �Address + Phone Number�� 3�

Others� 1�

Page 40: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 40

!  "79JEH`Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

��

The Factors of JO Model�2. What is JO Model? �

Social Responsibility Degree�

Higher than Normal� 2�Normal� 1�

Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.

Page 41: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 41

!  "79JEH�Z/E9?7B�.;IFEDI?8?B?JO� ;=H;;��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�% �

��

The Factors of JO Model�2. What is JO Model? �

Post Incident Response Appraisal�

Inappropriate� 2�Normal� 1� It is judged based on qualitative

reasons such as “response speed” and “the existence of the inquiry.”�

Page 42: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 42

!  �7I;�/JK:OZ&%*/�%D9���)7H9>�������• +FJ?9?7D�I�I>EFI�•  �7H:�?D<EHC7J?ED�B;7A7=;�>7FF;D;:�8O�/-(�%D@;9J?ED�

•  ��&���� �*���-&��*1���23���-*#,0� (��3��/)#*�,#('�•  0>;�FEII?8?B?JO�E<�������H;9EH:I�B;7A;:�_��9JK7BBO������H;9EH:I�•  &%*/�F7OI������4;D�=?<J�97H:��J>;�9EIJ�E<�H;?IIK?D=�F7OC;DJ�97H:�•  �9JK7B�9EIJI�7H;�7FFHEN?C7J;BO����C?BB?ED�O;D�

Application of JO Model�2. What is JO Model? �

• +D�0EF�E<�0>7J\�•  %DL;IJ?=7J?ED�9EIJI�8O�,"%],"%�"EH;DI?9�%DL;IJ?=7JEH^�7D:�J>;�9EIJ�<EH�I7J?I<O?D=�,�%� //�IJ7D:7H:I�J>;�9EIJ�E<�9KIJEC;H�IKFFEHJ�7D:�?DGK?HO�?I�799KCKB7J;:��

Page 43: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 43

!  �7I;�/JK:OZ&%*/�%D9���!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$���V��(�#�%���+)('+#�#%#,0���!*���V��(+,��'�#��',���+)('+���))*�#+�%�

����

Application of JO Model�2. What is JO Model? �

Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3.�

Page 44: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 44

Application of JO Model�2. What is JO Model? �

39,000=)**+× ()*(-*↑-−- + )↑.−- ) ×.�

!  �7I;�/JK:OZ&%*/�%D9��a��������4;D��!IJ?C7J;:��ECF;DI7J?ED��EIJ];79>�F;HIED^������%-��( ���*+('�%��' (�����$�� ���������V��(�#�%���+)('+#�#%#,0���!*�� ������V��(+,��'�#��',���+)('+���))*�#+�% ������

����

Page 45: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 45

���%DJHE:K9J?ED�

���3>7J�?I�&+�)E:;B��

���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�

���3H7F�1F�

Page 46: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 46

!  0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�•  %D�&7F7D�J>;�H;=KB7J?ED�E<�9ECF;DI7J?ED�<EH�F;HIED7B�?:;DJ?T78B;��?D<EHC7J?ED�B;7A7=;�:E;I�DEJ�;N?IJ�?D�&7F7D��

•  ,7IJ�;N7CFB;�7D:�9?L?B�JH?7BI�:;9?:;�J>;�9ECF;DI7J?ED��

•  /K=7>7H7�$7H7:7���������IJK:O�ED�J>;�9ECF;DI7J?ED�8O�9ECF7DO EH=7D?P7J?ED�M>;D�FH?L79O�7D:�F;HIED7B�?D<EHC7J?ED�7H;�9ECFHEC?I;:�

•  �ED:K9J?D=�-K;IJ?EDD7?H;�.;I;7H9>�•  �7I?9�F;HIED7B�?D<EHC7J?ED�IK9>�7I�9;BB�F>ED;�7D:�FKH9>7I;�?D<E���?I�9>;7F�7D:�J>;�C7@EH?JO�?I�M?J>?D������O;D��

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 47: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 47

!  !N7CFB;����;D;II;�•  ��"7CEKI�;:K97J?ED7B�9ECF7DO��•  ��IJ7W�8H?D=�EKJ�J>;���)�9B?;DJQI�:7J7�<EH�=7?D?D=�CED;O�•  �;D;II;�F7O�����4;D�=?<J�97H:�<EH�7BB�L?9J?CI�7D:�JEJ7B�9EIJ�<EH�9ECF;DI7J?ED�?I�CEH;�J>7D����8?BB?ED�O;D���

!  0>;�IEC;�E<�L?9J?CI�>7L;�9EBB;9J?L;�B7MIK?J��•  0>;�F7HJ?9?F7DJI�?D�9EBB;9J?L;�B7MIK?J�H;GK;IJ�������4;D�F;H�F;HIED�7I�J>;�9ECF;DI7J?ED�������4;D�?I�J>;�<;;�E<�B7MO;HI���

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 48: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 48

!  !N7CFB;���07H=;J].;J7?BI^�•  %D<EHC7J?ED�8H;79>�97KI;:�8O�,+/�C7BM7H;�•  ��)�9KIJEC;HIQ�F;HIED7B�?D<E��B;7A;:�•  ��)�9KIJEC;HIQ�9H;:?J�97H:�?D<E��B;7A;:�

• )7DO��B7II��9J?ED����0>;�JOF;�E<�9EBB;9J?L;�B7MIK?J���

•  %D�";8�������J>;�JEJ7B�9EIJ�E<�9EKDJ;HC;7IKH;�?I�����)���

•  %D�)7H9>������07H=;J�7=H;;�?D�9EKHJ�JE�F7O����)�?D�:7J7�8H;79>�B7MIK?J�7D:�J7H=;J�9ECF;DI7J;�KF�JE��������<EH�J>;�:7C7=;�E�L?9J?CI��

3. The Compensation in Real World and Analysis�

0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�

Page 49: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 49

!  %D<EHC7J?ED��H;79>�?D�&7F7D�,;DI?ED�/;HL?9;�•  0OF?97B�J7H=;J;:�7JJ79A�8KJ�97J7IJHEF>?9�>7HC��

��  07H=;J;:�!�C7?B���  ,�I�?D�&,/�7H;�?D<;9J;:�8O�)7BM7H;���  �JJ79A;HI�=7?D�J>;�9H?J?97B�?D<E��2?7�?D<;9J;:�,����  0>;�9EDT:;DJ?7B�?D<E��?I�B;7A;:��

3. The Compensation in Real World and Analysis�

Japan Pension Service Information Breach�

Page 50: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 50

!  �O8;H�%DIKH7D9;�?D�&7F7D�•  !N7CFB;Z0EA?E�)7H?D;�,%%�(;7A7=;�%DIKH7D9;�

•  ��!�%� (&)�'+�,#('� (+,���'�#��',���+)('+�� (+,�

•  ��!�%� (&)�'+�,#('� (+,Z/KFFEHJ�J>;�9EIJ�H;B7J;:�JE�B;=7B�?IIK;�•  �EL;H7=;Z�)�[�����4;D�

•  �'�#��',���+)('+�� (+,Z/KFFEHJ�J>;�9EIJ�<EH�?D9?:;DJ�H;IFEDI;�•  �EL;H7=;Z�)�[����4;D�

3. The Compensation in Real World and Analysis�

Cyber Insurance�

Page 51: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 51

!  +KH�.;I;7H9>Z����7I;I�.;I;7H9>]����R����^�•  �L;H7=;Z�����O;D]0>;��L;H7=;�E<�&+�)E:;BZ)EH;�J>7D�������4;D^�•  �99EH:?D=�JE�EKH�=H7F>?97B�7D7BOI?I�C7@EH?JO�E<�9ECF;DI7J?EDI�7H;�����O;D�R������O;D��

The Analysis of Compensation in Real World PART1�3. The Compensation in Real World and Analysis�

0

2,000

4,000

6,000

8,000

10,000

12,000

2001/04 2004/01 2006/10 2009/07 2012/04 2014/12 2017/09

�������

In this graph, more than 10,000 yen are plotted as 10,000 yen.

Page 52: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 52

!  %<�M;�I;;�IF;9?T9�97I;I]$?=>�9ECF;DI7J?EDY�?L?B�0H?7B^\�•  %D�9?L?B�JH?7B�97I;�CEH;�J>7D������O;D�?I�F7?:�EDBO�TD7D9?7B�?DIJ?JKJ?ED�7D:�9?L?B�JH?7B�97I;�F7O�CEH;�J>7D�������O;D�

The Analysis of Compensation in Real World PART1�

Year� Company� Actual Cost� JO model�2002� TBC� 35,000 Yen 66,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen 2009� Mitsubishi UFJ Securities� 10,000 Yen 180,000 Yen 2009� Alico Japan� 10,000 Yen 26,000 Yen

Year� Company� Actual Cost� JO model�1998� Uzi City� 15,000 Yen 66,000 Yen 1998� Waseda University� 5,000 Yen 606,000 Yen 2002� TBC� 35,000 Yen 66,000 Yen 2004� Yahoo BB!� 6,000 Yen 12,000 Yen 2007� JAL Labor Union� 10,000 Yen 606,000 Yen

High Comp.�

Lawsuit�

3. The Compensation in Real World and Analysis�

Page 53: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 53

!  #7F��D7BOI?I�8;JM;;D�&+�)E:;B�7D:��9JK7B��ECF;DI7J?ED�•  0>;H;�?I�7D�;DEHCEKI�=7F�8;JM;;D�&+�CE:;B�;IJ?C7J;:�9EIJI�7D:�79JK7B�9ECF;DI7J?ED��

The Analysis of Compensation in Real World PART2�

0

5,000

10,000

15,000

20,000

25,000

30,000

35,000

40,000

45,000

50,000

3. The Compensation in Real World and Analysis�

But, more than 50,000 yen are plotted as 50,000 yen.

Page 54: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 54

���%DJHE:K9J?ED�

���3>7J�?I�&+�)E:;B��

���0>;��ECF;DI7J?ED�?D�.;7B�3EHB:�7D:��D7BOI?I�

���3H7F�1F�

Page 55: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 55

!  ��,KHFEI;�E<�&+�CE:;B�• +F;H7J?ED7B�)E:;B�• *EHC7J?L;�)E:;B�

!  ,HEFEI7B�7I�7�*EHC7J?L;�)E:;B�•  /;7H9>78?B?JO �Z%D<EHC7J?ED�;NJH79J?ED�M?J>�/*/Y+/%*0�•  �7D9;B78?B?JO �Z0>;�;7I;�E<�9>7D=?D=�?D<EHC7J?ED];N��8?HJ>:7O^�•  .;JH?;L78?B?JO �Z0>;�9EL;H7=;�E<�J>;�?D<EHC7J?ED�B;7A;:�

Consideration of Personal Identifiable Information Leakage �4. Wrap-Up �

Page 56: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Copyright © 2015 Tomohisa Ishikawa All rights reserved. 56

!  %D�J>?I�.;I;7H9>\�•  0>?I�H;I;7H9>�L;H?T;I��>K=;�=7FI�8;JM;;D�&+�CE:;B�7D:�79JK7B�9ECF;DI7J?ED�9EIJI�;L;D�J>EK=>�IE9?;JO�>7L;�8;9EC;�I;DI?J?L;��JE�F;HIED7B�?:;DJ?T78B;�?D<EHC7J?ED�B;7A7=;��

•  !L;D�DEM�J>;�7L;H7=;�9ECF;DI7J?ED�9EIJ�?I������O;D�7D:�J>;�C7@EH?JO�?I�M?J>?D�����O;D�JE������O;D���BIE�EDBO�TD7D9?7B�?DIJ?JKJ?ED�EH�J>;�@K:=C;DJ�E<�9?L?B�JH?7BI�B;7:I�CEH;�J>7D������O;D�9ECF;DI7J?ED��

Wrap-Up�4. Wrap-Up �

Page 57: How much is your phone-number, living address or date of ... · Japan Pension Service Information Breach 2015 May ...DIJ?JKJ?ED 7D: 9?L?B JH?7B 97I; F7O CEH; J>7D O;D The Analysis

Q&A�

Thank you for your time & attention Feel Free to Contact Us �