Guide to Supply Chain Security Measures for Power Control Systems Published

1. Background and purpose

Guideline for Establishing Safety Principles for Ensuring Cybersecurity of Critical Infrastructure, formulated in 2023, clearly states that responses to cybersecurity risks stemming from supply chains are common initiatives required for critical infrastructure sectors.

In relation to this, National center of Incident readiness and Strategy for Cybersecurity (NISC) clarifies reference information on initiatives to ensure security as outlined in the Guideline for Establishing Safety Principles. Measures against supply chain risks based on the Economic Security Promotion Act are also progressing.

As an initiative in the electric power sector, the Electric Power Sub-Working Group (Electric Power SWG) of the Study Group for Industrial Cybersecurity, under the Ministry of Economy, Trade and Industry (METI), which discusses cybersecurity measures in the electric power sector, held discussions on supply chain risks related to power control systems and published the Recommendations for Measures to Improve the Supply Chain Security of Power Control Systems in 2023. In February 2025, the Japan Electric Association revised its Power Control System Security Guidelines based on the recommendations provided.

The newly developed Guide to Supply Chain Security Measures for Power Control Systems aims to support and encourage business operators in implementing measures aligned with the guidelines.

2. Overview of the Guide to Supply Chain Security Measures for Power Control Systems

This document provides a guide to implementing measures and examples of good practices that can serve as a reference when putting into action the supply chain security measures described in the Power Control System Security Guidelines, with the aim of supporting and encouraging business operators to take these measures. It also provides reference information for responding to the requirements of the System for Ensuring the Stable Provision of Specified Essential Infrastructure Services by Preventing Specified Interference Actions, as outlined in the Economic Security Promotion Act.

Specifically, it organizes the anticipated response flows for initiatives such as supply chain risk management, confirmation of security specifications, and the appropriate management of equipment while providing a guide to the specific measures required for each response item and good practices that can be used as a reference when implementing these measures.

• Guide to Supply Chain Security Measures for Power Control Systems (in Japanese)(PDF:1,378KB)

Related Links (in Japanese)

• Electric Power Sub-Working Group of the Working Group1 (System, Technology, Standardization) of the Study Group for Industrial Cybersecurity
• Major documents regarding the assurance of cybersecurity for critical infrastructure (Website of the National center of Incident readiness and Strategy for Cybersecurity)
• Guideline for Establishing Safety Principles for Ensuring Cybersecurity of Critical Infrastructure
• Recommendations for Measures to Improve the Supply Chain Security of Power Control Systems(PDF:196KB)

Division in Charge

Electricity Industry and Market Office, Agency for Natural Resources and Energy