Insurance System Solutions Department,
Group Insurance Group No.1,
Joined in 1995
Our mission is to ensure the security of our clients
I am based at Dai-ichi Frontier Life Insurance and work as an expert in the areas of system risk and cybersecurity. I have been in my current position since April 2019, and 2024 will be my fifth year in this position.
The mission of this position is to protect the security of Dai-ichi Frontier Life Insurance and prevent incidents such as information leaks. I envision specific situations in which incidents might occur and develop and implement preventive measures.
The work in the security field is quite broad. It ranges from system-based measures that can defend against external attacks, to establishing a management system to prevent incidents at outsourced companies, preventing information leaks via external services, and internal controls to prevent incidents caused by employees.
Among the wide range of tasks, the first thing we must do is to improve our systems to prevent incidents. At the same time, we need to create security standards and clarify and publicize the rules for handling information. We are also working on improving our processes, such as making it mandatory to undergo an examination before starting to use external services such as cloud tools. No matter how convenient a tool or service may be, if we cannot guarantee its safety, the company cannot give permission to use it.
It is also very important to regularly receive assessments from third-party organizations regarding the security measures we are implementing and use the results to strengthen our system.
Obtained expert certification when starting current job
At Dai-ichi Frontier Life Insurance, system risk and cybersecurity-related work is mainly carried out by myself and an employee who is knowledgeable about security. In some cases, we also add specialized staff from consulting companies to carry out the work.
What takes up a lot of time in our daily work is considering the introduction of new security solutions and various security-related meetings. Examples of introduction considerations include considering the introduction of a 24/7 security monitoring (SOC) service and considering in-house vulnerability diagnosis.
The main topics of the meetings are confirmation of the impact and countermeasures for alerts (notifications from security products), consultations on security design and specifications, and consultations on the use of cloud services, etc.
When it was decided that I would be stationed at Dai-ichi Frontier Life Insurance as a full-time specialist in the cybersecurity field, I obtained the "Expert Certification" implemented by DLTX upon the recommendation of my supervisor. First, my supervisor recommended candidates based on their past behavior and skill evaluations, and the candidates' submitted materials related to the review topic and made a presentation and question-and-answer session for about an hour to external security experts, and after the review, I was certified as an expert in the cybersecurity field.
Harnessing Experience in External Sales to Master Cybersecurity
At DLTX, we consider the task of providing solutions to clients other than Dai-ichi Life to be "external sales". Dai-ichi Frontier Life is the third company for which I have worked as an external sales member, working full-time at a client's premises, and I have over 11 years of experience in external sales. Both Dai-ichi Frontier Life and its previous client, Neo First Life, are Dai-ichi Life Group companies, so I think there are many commonalities and similarities with internal sales.
The biggest difference between this and internal sales work with Dai-ichi Life Insurance as a client is that in many cases, a small number of people are responsible for a wide range of tasks. For this reason, it is important to actively promote the efficiency and speed of work.
Currently, I am in charge of the cybersecurity field at Dai-ichi Frontier Life Insurance, and I find my daily work very rewarding. In the future, I would like to continue to pursue work in security-related fields.
