I always wanted the chance to use that title for a blog! So, as I’m currently in Tokyo, and was yesterday reviewing the security of the business unit here, including processes for managing back-up tapes, that’s my excuse to make a reference to an old classic hard rock album..
One must always show an appreciation for local cultures when visiting international business units, and this is especially true of Japan. Charging in and picking fault will not only cause offense, it will result in an incorrect assessment of risks. One example that highlights the point is that I noticed yesterday, as I was being driven through the outskirts of Tokyo, people parking their bicycles outside a suburban shopping centre. Not a single bike lock was in view: it’s not even condiered that a crook might come along and steal one. So while a bike might appear to be highly vulnerable to being stolen, the level of threat is considered to be very low and therefore, it’s a low overall risk.
That’s not to say that Information isn’t secured with any metaphorical bike-locks. In fact the opposite appears to true and I’ve found security here to be well considered and managed. One example that highlights the differences is the way that security awareness messages are delivered. In the UK, I know that if a security awareness message goes out to the company by email that most recipients will simply ignore it. In Japan, everybody reads the message, and will take whatever action is says. Conversely, delivery of messages via Intranet here – which seems to work well in the UK – is not considered to be effective.
Anyway, the early morning view from my 30th floor hotel room is that the sun is out and it looks like it’s going to be another nice day…