Fujitsu and PwC Japan Collaborate on Sovereign Cloud Compliance Framework for Critical Infrastructure

Fujitsu Limited and PwC Japan Group have announced a strategic collaboration aimed at strengthening the credibility and adoption of Fujitsu Cloud Service powered by Oracle Alloy. The initiative is designed to support compliance with Japan’s Economic Security Promotion Act, particularly the System for Ensuring Stable Provision of Critical Infrastructure Services. n nThe partnership will produce a comprehensive reference guide, scheduled for release in December 2025, outlining how Fujitsu’s sovereign cloud offering meets all regulatory requirements. This document will assist designated critical infrastructure operators in Japan by offering a structured approach to fulfilling mandatory risk management obligations, thus easing compliance efforts and encouraging broader cloud integration. n nThe guide will cover all 27 stipulations related to equipment and 14 requirements for outsourced maintenance and management functions. It will clarify the division of responsibilities between cloud providers and users, detail implemented safeguards for sovereignty and verifiable operational oversight, recommend user-side actions, and provide references to relevant tools and services. n nAdditionally, Fujitsu and PwC Japan plan to extend their cooperation into areas such as security clearance compliance, support for CSPM/CNAPP deployment on the sovereign cloud platform, and advancing the use of trusted, data-resident artificial intelligence solutions. n nBy integrating Fujitsu’s operational governance model with PwC Japan’s advisory expertise, the collaboration aims to create a transparent, actionable framework that links security validation, organizational controls, and real-world implementation strategies. This effort is expected to significantly reduce the administrative load on critical infrastructure entities while promoting secure digital transformation. n n”This joint initiative underscores the trustworthiness of our sovereign cloud infrastructure and its alignment with national economic security goals,” said a Fujitsu representative. “We are providing clear, practical support to help clients meet regulatory expectations efficiently.” n
— News Original —nFujitsu and PwC Japan partner on economic security measures for sovereign cloud solutionnFujitsu Limited and PwC Japan Group (hereinafter PwC Japan) today announced a collaboration to enhance the reliability and accelerate market penetration of the Fujitsu Cloud Service powered by Oracle Alloy [1]. This partnership will focus on supporting compliance with the System for Ensuring Stable Provision of Critical Infrastructure Services under Japan ‘s Economic Security Promotion Act [2]. n nThrough this collaboration, Fujitsu and PwC Japan aim to develop a reference guide clarifying Fujitsu ‘s sovereign cloud service ‘s compliance status with the System for Ensuring Stable Provision of Critical Infrastructure Services [3]. The guide, set to be published in December 2025, will provide a practical framework for specified critical infrastructure operators in Japan to formulate and implement mandatory risk management measures, thereby reducing the burden of compliance and promoting cloud adoption. n nBased on Fujitsu ‘s sovereign cloud service, Fujitsu and PwC Japan will provide support for the design and documentation of cloud user-side risk management measures, tailored to the specific risk characteristics and operational requirements of each specified critical infrastructure operator [4]. In addition, the two companies aim to expand their collaboration into areas such as supporting compliance with the security clearance system, assisting with CSPM/CNAPP application [5] for apps on Fujitsu ‘s sovereign cloud service, and promoting the utilization of sovereign AI with data sovereignty and trustworthiness. n n”The new guideline developed together with PwC Japan will clearly articulate the reliability of Fujitsu ‘s sovereign cloud service and its alignment with Japan’s Economic Security Promotion Act. By offering practical guidance for meeting regulatory requirements, we aim to substantially reduce the compliance burden for our customers. Through Fujitsu ‘s secure and dependable sovereign cloud service, we are committed to empowering our critical infrastructure partners to operate safely and sustainably.” n nThe reference guide will systematically organize the compliance status of Fujitsu ‘s sovereign cloud service with the System for Ensuring Stable Provision of Critical Infrastructure Services, covering all 27 requirements for constituent equipment and 14 requirements for outsourced critical maintenance and management services as stipulated by the risk management measures. Specifically, it will detail: 1) the shared responsibility model between cloud users and cloud providers, 2) measures taken to meet the requirements for sovereign cloud and verifiable evidence of management status, 3) guidelines for actions that users should implement, and 4) reference information for related services and functions. n nThe guide will visualize the reliability and suitability of Fujitsu ‘s sovereign cloud service for the Economic Security Promotion Act, leveraging Fujitsu ‘s pioneering framework and operational governance in Japan. Through this, both companies will present a practical framework that connects security acceptance testing, control information such as organizational structures and countermeasures, and the practical responses of users. This will significantly support specified critical infrastructure operators in simultaneously reducing the burden of compliance with the System for Ensuring Stable Provision of Critical Infrastructure Services and promoting cloud utilization.

Leave a Reply

Your email address will not be published. Required fields are marked *