Security– category –

For overseas businesses, Japan’s Act on the Protection of Personal Information (APPI) is not just a legal topic for domestic companies. If your business serves users in Japan, handles customer or employee information connected to Japan, ...

Japanese enterprise customers often evaluate cloud and SaaS vendors through procurement checklists, security questionnaires, and RFPs. If your team already runs a strong global privacy program, you may still find that APPI (Japan’s priva...

In 2026, running Remote Desktop Services (RDS) without multi-factor authentication (MFA) is no longer a viable security strategy. Exposed RDP endpoints are still being scanned around the clock, credential stuffing attacks are automated, ...

TL;DR: Treat public RDP as an exception. Put RDP behind a VPN or RD Gateway, enforce phishing-resistant MFA, allowlist source IPs, and monitor aggressively. 【The 2025 reality】 Always-on internet scanning means any exposed 3389/TCP gets...

Who this column is for? ：Global legal/ops teams that host workloads in Japan or serve Japanese users and need to transfer personal data overseas. 【APPI in a nutshell】 APPI broadly covers business operators handling personal informatio...