Key Takeaways
- Fujitsu has unveiled a comprehensive cybersecurity strategy that treats security as an ongoing cyber defense lifecycle rather than a one‑time IT measure.
- The lifecycle covers strategy planning, design & development, implementation, operations, evaluation, and continuous improvement.
- Central to the approach is the Cyber Nerve System, which aggregates data, detects threats, and visualizes analysis to guide frontline defenders.
- A virtual Cyber Security Nerve Center—staffed by roughly 100 experts from across Fujitsu—links technical insights with executive decision‑making.
- Fujitsu will offer AI‑driven consulting, vulnerability assessment, threat hunting, and red‑team services, validating new capabilities in its own environment before customer release.
- The initiative responds to the rise of AI‑powered attacks and expanding enterprise attack surfaces, and it aligns with Japan’s Project YATA‑Shield national AI cyber defense effort.
Fujitsu’s Cybersecurity Strategy Overview
On August 26, Fujitsu announced a new cybersecurity strategy designed to help enterprises continuously strengthen their defenses in the AI era. Recognizing that generative AI and increasingly complex IT environments are reshaping both offensive and defensive operations, the company shifted its view of cybersecurity from a post‑deployment operational task to an integral, end‑to‑end process. The strategy emphasizes that protecting digital assets requires a systematic, lifecycle‑based approach that evolves alongside threats and technology.
Cyber Defense Lifecycle Framework
The strategy introduces a cyber defense lifecycle comprising six interconnected phases: strategy planning, design and development, implementation, operations, evaluation, and improvement. By treating cybersecurity as a continuous loop, organizations can anticipate threats, deploy controls, monitor effectiveness, learn from incidents, and refine their posture. This framework ensures that security measures are not static but are regularly updated to match the evolving threat landscape and business needs.
Cyber Defense Operating Model
To operationalize the lifecycle, Fujitsu defined a cyber defense operating model composed of four sub‑models. These sub‑models work together to structure how an enterprise builds, maintains, and enhances its overall cyber defense capability. The model provides a clear taxonomy for allocating responsibilities, aligning defenses with asset criticality, and measuring performance across the organization.
Domain Model Details
The first sub‑model, the domain model, identifies the enterprise‑wide assets that must be protected. It encompasses both physical assets—such as facilities and hardware—and IT assets, including applications, data, networks, and cloud services. By mapping all relevant domains, the model ensures that no critical component is overlooked when designing defensive controls.
Philosophy Model
The philosophy model introduces a “slow‑down defense” approach. Rather than attempting to block every attack instantly, this philosophy focuses on delaying adversaries, increasing the time and effort required for them to achieve their objectives. Slowing down attackers creates additional windows for detection, response, and mitigation, thereby reducing the likelihood of successful breaches.
Relationship Model
The relationship model designs defense responsibilities and coverage based on the ties an organization has with its group companies, partners, and suppliers. It recognizes that security is not confined to a single entity; vulnerabilities in partners or supply‑chain connections can cascade into the core enterprise. By mapping these relationships, the model allocates appropriate defensive measures to each link in the extended ecosystem.
Proximity Model
The proximity model organizes required defensive activities according to how close an attacker is to achieving a specific objective. It creates concentric layers of protection: the outermost layer addresses early‑stage reconnaissance, while inner layers focus on preventing lateral movement, privilege escalation, and data exfiltration. This gradient enables defenders to prioritize resources where they can have the greatest impact on thwarting an attack.
Cyber Nerve System Function
At the heart of Fujitsu’s framework lies the Cyber Nerve System, a technology platform that collects data generated through the cyber defense framework. The system analyzes this information to detect threats and risks, then visualizes observation and analysis results in an intuitive format for frontline defense teams. By turning raw data into actionable insight, the Cyber Nerve System enables quicker, more informed responses to emerging threats.
Cyber Security Nerve Center Structure
Fujitsu will establish a virtual organization called the Cyber Security Nerve Center as the core of its strategy. Comprising about 100 members, the Nerve Center draws expertise from Fujitsu Research, Uvance Wayfinders, service development, middleware development, and delivery operations. It consolidates know‑how gained from Fujitsu’s own internal use as a “customer zero” and from customer support projects, while also integrating innovative technologies from startups and external partners to stay abreast of market, threat, and technology trends.
Nerve Center’s Executive Role
The Cyber Security Nerve Center serves as the bridge between technical analysis and executive leadership. It reports objective assessments and evidence‑based findings generated by the Cyber Nerve System to senior management, accompanied by clear recommendations. This function supports informed decision‑making, helps prioritize investments, and ensures that cyber risk considerations are integrated into broader business strategy.
Product Development and Validation Loop
When gaps are identified, Fujitsu may develop new products or functions tailored to address specific defensive needs. These innovations are first validated within Fujitsu’s own environment to confirm effectiveness and reliability. Successful solutions are then packaged as advanced defensive capabilities and offered to customers, ensuring that the company’s offerings are battle‑tested before deployment.
AI‑Enabled Service Portfolio
Fujitsu’s service lineup leverages artificial intelligence to enhance traditional security offerings. Consulting services help clients design and implement the cyber defense lifecycle and operating model. AI‑based vulnerability assessments use high‑performance scanning to uncover weaknesses across complex infrastructures. AI threat hunting employs machine learning to sift through vast volumes of logs and threat intelligence, proactively seeking signs of attack that evade conventional monitoring. AI red‑team operations simulate real‑world attacks using AI‑driven adversaries, testing the resilience of systems, organizations, and processes against sophisticated threats.
Context of Rising AI‑Powered Threats
The strategy’s timing reflects the rapid evolution of cyber threats driven by advances in generative AI, which increase the sophistication and automation of attacks. Simultaneously, enterprise IT environments have grown more intricate through widespread cloud adoption, external data exchanges, and deep supply‑chain integrations. This expanded attack surface means organizations must defend not only their own systems but also the networks and assets of partners, contractors, and affiliated entities. Fujitsu’s lifecycle approach is designed to address this broader, more dynamic risk environment.
Alignment with Japan’s Project YATA‑Shield
In May 2026, Japan launched Project YATA‑Shield, a national AI cyber defense package intended to counter large‑scale, high‑speed cyberattacks using defensive AI technologies. Fujitsu has stated that its high‑performance AI‑based vulnerability assessment capabilities will contribute to this initiative. By aligning its commercial offerings with the nation’s strategic goals, Fujitsu aims to strengthen Japan’s overall cyber resilience while advancing its own market position in AI‑enhanced security.