Japan adopts new active cyber defense strategy for critical infrastructure

Recorded Future reported that Japan has adopted an Active Cyber Defense framework to shift its national posture from post-incident investigation to preventive action. The strategy introduces mandatory incident reporting rules for critical infrastructure operators and permits limited disruption of attack infrastructure. [1]

Under the new framework, designated critical infrastructure operators must notify the government regarding covered systems and report qualifying incidents as of October 1, 2026. Organizations with existing systems have a six-month window to submit their initial notifications to authorities, according to Recorded Future. [1]

The Ministry of Defense and the prime minister oversee the Japan Self-Defense Forces, which include ground, maritime, and air branches. The new strategic shift builds on government efforts to secure national assets against persistent electronic threats. [1][2]

Recorded Future reported that additional legal authorities allowing the Japanese government to collect and act on communications information will take effect on November 23, 2027. [1]