cyber.hendryadrian.com
Security News · wiz.io

Wiz Plans ISMAP External Assessment for Early 2027

· Original article ↗

Summary

Wiz says it completed an internal assessment against ISMAP controls and engaged a registered audit firm, with an external assessment planned for early 2027. Wiz is not currently ISMAP-listed.

Key points

  • Japanese government agencies are generally required to procure cloud services listed on the ISMAP Cloud Service List.
  • Wiz says it is not currently listed on ISMAP; the program has no official in-progress or provisional status.
  • Wiz completed an internal gap assessment against current ISMAP controls and published revision proposals.
  • Wiz says it engaged an audit firm on the ISMAP Auditors List and plans to begin an external assessment in early 2027.
  • ISMAP requires external audits, Japanese-language application support and documentation, and ongoing audits and renewals.
  • The article says existing certifications do not equal ISMAP registration, and use of Wiz alone does not verify or guarantee ISMAP compliance.

Article Details

Event Type
Wiz's preparation for an external ISMAP assessment and potential registration to serve Japan's public sector.
Impact
Wiz is not currently registered on the ISMAP Cloud Service List, which the article says Japanese government agencies are generally required to use when procuring cloud services. Wiz reports completing a gap assessment and engaging an ISMAP-registered audit firm, with plans to begin the external assessment in early 2027. The article states that using Wiz does not itself verify or guarantee compliance with ISMAP security standards.

Vendors

WizWiz and ISMAP: How We Are Preparing to Serve Japan's Public Sector

Countries

JapanWiz and ISMAP: How We Are Preparing to Serve Japan's Public Sector

Industries

Cloud servicesWhen Japanese government agencies procure cloud services, they are required, in principle, to procure from services registered on the ISMAP Cloud Service List. This list is established under ISMAP (Information systemGovernmentWhen Japanese government agencies procure cloud services, they are required, in principle, to procure from services registered on the ISMAP Cloud Service List. This list is established under ISMAP (Information system

Related Articles