Fujitsu reports that it establishes a cybersecurity strategy aimed at continuously evolving the cyber defense capabilities of companies in the face of the advancement of generative AI and the increasing complexity of business systems. This strategy presents cybersecurity not only as an operational measure that is applied once IT systems are built, but as a comprehensive cyber defense life cycle that encompasses strategic planning, design and development, implementation, operations, evaluation and continuous improvement.
Within the framework of this strategy, Fujitsu has defined the Cyber Defense Operations Model, which systematizes the approach to develop, operate and improve the global cyber defense capabilities of organizations, as well as the Fujitsu Cyber Defense Framework, which allows this model to be put into practice.
In addition, Fujitsu will establish the Cyber Nerve System, a mechanism capable of detecting cyber threats and risks from the data generated through the Fujitsu Cyber Defense Framework and visualizing the results of its monitoring and analysis. This system will make it possible to guide the different cyber defense activities and promote autonomous action cycles within the operational teams.
Fujitsu will also create a virtual organization called the Cyber Security Nerve Center (“Nerve Center”), which will form the core of its cybersecurity strategy. Based on objective evaluations and the information generated by the Cyber Nerve System, the Nerve Center will support the decision-making of management teams through reports and recommendations addressed to senior management. In addition to centralizing the knowledge acquired through Fujitsu’s Customer Zero initiatives and projects developed with clients, it will drive the cybersecurity strategy transversally throughout the organization, incorporating the latest market trends, emerging threats and technological evolution.
Specifically, Fujitsu will evaluate and integrate advanced technologies from Fujitsu Research, Uvance Wayfinders, service development divisions and its external partners. When necessary, you will develop new products and functionality and test their effectiveness in your own environment. These capabilities will then be made available to customers as advanced defense capabilities, including consulting services, high-performance AI vulnerability assessment, AI Threat Hunting (Note 1), and AI Red Team Operations (Note 2).
Fujitsu will continuously accompany its clients throughout their entire cyber defense process, from strategic planning and the design and development phases to operations and continuous improvement. To do this, it will identify the differences between a global vision of cyber defense, permanently updated, and the specific situation of each client.
Likewise, the knowledge gained through projects developed with clients will be transferred back to the Nerve Center and incorporated into the Cyber Nerve System, as well as Fujitsu’s software services and solutions. In this way, the company will contribute to the continuous improvement of cyber defense capabilities and the cyber resilience of companies in the age of AI.
Overview of Fujitsu’s cybersecurity strategy
With the rapid evolution of AI technologies in recent years, cyberattacks are becoming more sophisticated and automated. Attackers are using generative AI to perform activities such as searching for vulnerabilities, analyzing attack paths, generating malicious code, or lateral movement within internal systems once compromised, all in much less time and with greater precision than before.
At the same time, companies’ IT environments are increasingly complex due to the use of cloud services, the exchange of data with third parties and the connection with the different systems that make up their supply chains. The perimeter that companies must protect is no longer limited to their own systems and networks, but extends to group companies, partners and suppliers throughout the entire supply chain.
In this context, it is increasingly difficult to maintain and continuously improve global cyber defense capabilities through traditional security models, which focus primarily on preventing intrusions or detecting and responding to them once they have occurred.
Therefore, companies must rethink cyber defense as a strategic priority for the business and strengthen their capabilities based on the premise that cyber attacks can occur. The objective thus goes from trying to avoid them completely to minimizing their impact and guaranteeing business continuity.
Main features
1.- Four submodels to define business cyber defense in the age of AI
The Fujitsu Cyber Defense Operations Model systematically structures the assets to be protected, the defense philosophy, responsibilities and protection levels through four sub-models. In this way, it allows establishing priorities in security measures and the necessary investments, favoring the continuous improvement of the defense capabilities and cyber resilience of organizations.
The Fujitsu Cyber Defense Domain Model defines the assets that need to be protected within the enterprise based on their operational role, rather than solely by device type. Its scope includes the entire organization, including both IT environments and physical areas, including surveillance cameras or medical equipment.
The Fujitsu Cyber Defense Philosophy Model establishes the fundamental principles of defense and incorporates the concept of “deceleration defense.” This approach not only seeks to deter attacks, but also to slow down the actions of attackers to give defense teams a time advantage to observe their behavior and take additional measures.
The Fujitsu Cyber Defense Relationship Model defines cyber defense taking into account the organization’s relationships with its environment. To this end, it establishes responsibilities and protection areas based on relationships with group companies and collaborating companies, with the aim of increasing the cyber resilience of the entire supply chain.
Finally, the Fujitsu Cyber Defense Proximity Model establishes different levels of defense by organizing the necessary actions depending on the proximity to the objective pursued by the attacker. This helps organizations determine the levels of protection they need and prioritize their security investments.
2.- Development, operation and improvement of defense with Fujitsu Cyber Defense Framework
To implement the Fujitsu Cyber Defense Operations Model, Fujitsu has developed the Fujitsu Cyber Defense Framework, a practical framework designed to continually increase the effectiveness of cyber defense through its development, operation and constant improvement.
This approach allows companies to approach cyber defense as a complete life cycle, including strategic planning, design and development, operations and continuous improvement, instead of considering it only as an operational measure after the implementation of IT systems. Additionally, Fujitsu plans to offer advanced capabilities such as high-performance AI vulnerability assessment and contribute to the YATA-Shield Project (Note 3).
Likewise, Fujitsu will develop the Cyber Nerve System, intended to detect cyber threats and risks from the data generated through the application of the framework and to visualize the results of its monitoring and analysis. By providing a shared vision of the cyber defense environment, the system will make it possible to guide the different protection activities and promote autonomous cycles of action within operational teams.
3.- Nerve Center as the core of Fujitsu’s cybersecurity strategy
The Nerve Center will be a virtual organization made up of approximately 100 professionals, responsible for defining the strategy and policies of the Cyber Nerve System. Based on the objective evaluations and information generated by this system, the Nerve Center will support the decision-making of management teams through reports and recommendations on issues such as system closures, cyber defense priorities or investment policies.
This organization will bring together Fujitsu’s knowledge and technologies to transversally drive cybersecurity strategy, the adoption of new technologies and the development of services. Furthermore, taking into account the evolution of the market and threats, it will incorporate new technologies from Fujitsu Research, Uvance Wayfinders, the service and middleware development divisions, the delivery teams, as well as startups and external partners, integrating them into Fujitsu’s own cyber defense strategy.
By combining practical knowledge gained through Fujitsu’s Customer Zero initiatives and experience from its customers’ environments, and incorporating these learnings into the Cyber Nerve System and customer services, Fujitsu aims to continually evolve enterprise cyber defense capabilities.
Building on this practical knowledge, the company will also promote the commercialization as services of advanced cyber defense capabilities, including AI Threat Hunting and AI Red Team Operations.
4.- Development of specialized professionals for cyber defense
Fujitsu will promote the training of professionals specialized in cybersecurity through its Security Meister program. The company will continuously incorporate into its training programs the practical knowledge accumulated in the Nerve Center, the latest threat analysis and the experience obtained in real defense activities.
The company will also promote the commercialization of services with advanced cyber defense capabilities
In this way, Fujitsu will encourage the development of highly specialized profiles, such as internal ethical hackers and security architects, thus strengthening the talent necessary to face the new needs of cyber defense.
Future plans
Fujitsu will continue to develop its corporate cybersecurity strategy for the AI era, with the Nerve Center as the central organization. Within the framework of this strategy, the company will contribute to strengthening the cyber resilience of its clients through the progressive incorporation of consulting services based on practical experience, system construction and operation services, and defense services powered by AI.
In addition, Fujitsu will expand its advanced monitoring and automated response services and solutions, as well as support for the implementation of AI agents in its customers’ environments.
The Fujitsu company will also evolve into a next-generation cyber defense platform, aimed at protecting both companies and their entire supply chains through its integration with Fujitsu technologies, including its large Takane language model.
