Corporate LawLast updated: 2026-10-284 min readPublic-source summary

METI Opens a Special Cybersecurity Consultation Desk for Small and Medium-Sized Enterprises (Announced 27 October 2026): Free Advice at Yorozu Support Centres and SMRJ

This article compiles what Japanese government bodies have published, together with the statutory text. Links to the primary sources are included. For a specific matter, pleasecontact us.

Key Takeaways

  • ✓On 27 October 2026 the Ministry of Economy, Trade and Industry (METI) announced that it was opening a special cybersecurity consultation desk for small and medium-sized enterprises and small businesses, and starting to push information out to them
  • ✓METI cited the many large-scale data leaks and other damage caused by a series of cyberattacks on Japanese companies and other organisations
  • ✓The free desks were opened that day at the Yorozu Support Centres in each prefecture and at the IT Management Support Center of the Organization for Small & Medium Enterprises and Regional Innovation, JAPAN (SMRJ)
  • ✓According to the reference material, the Yorozu Support Centres offer free advice as many times as needed, together with other management issues, while the SMRJ IT Management Support Center offers free 60-minute online consultations, available any number of times, with IT specialists in a neutral position
  • ✓METI will get this information to small businesses through support bodies such as chambers of commerce and other business associations, financial institutions and tax accountants

Not sure how this applies to your situation? Ask a lawyer — the first 30 minutes are free.

Book a free consultation
Share this article

On 27 October 2026 the Ministry of Economy, Trade and Industry (METI) announced that it was opening a special cybersecurity consultation desk for small and medium-sized enterprises (SMEs) and small businesses, and starting to push information out to them. The move responds to the many large-scale data leaks and other damage caused by a series of cyberattacks on Japanese companies and other organisations.

This page summarises the METI news release and its reference material on the special cybersecurity consultation desk (a PDF headed "Cybersecurity measures for SMEs and small businesses").

Overview

ItemDetails
Date announced27 October 2026
Announced byMinistry of Economy, Trade and Industry (Small and Medium Enterprise Agency)
WhatOpening of a special cybersecurity consultation desk for SMEs and small businesses, and start of proactive ("push") information provision
Where the desks areThe Yorozu Support Centres in each prefecture, and the IT Management Support Center of the Organization for Small & Medium Enterprises and Regional Innovation, JAPAN (SMRJ)
CostFree
Opened27 October 2026 (the day of the announcement)

1. Opening of the special consultation desks

According to the news release, free special cybersecurity consultation desks were opened as of 27 October at the Yorozu Support Centres set up in each prefecture and at the SMRJ IT Management Support Center, and they accept consultations from SMEs.

The reference material describes the two desks as follows.

DeskIntended forContent and format
Yorozu Support Centres (one-stop consultation desks)Businesses that do not know specifically what to do, or that want to discuss security together with wider management concernsFree, as many times as needed. Covers management issues including the use of IT and information security. Refers businesses to specialists and other bodies where needed
SMRJ IT Management Support CenterBusinesses that want to consult a specialist on IT and information securityFree online consultations of 60 minutes, available any number of times. Handled by IT specialists in a neutral position. Advice on information security measures, identifying risks, information asset management and management structures

Free Tool Related to This Article

Contract Risk Checker

Try our free simulator related to this topic.

Try for free →

2. Proactive information provision

According to the news release, METI will push information about these initiatives out to SMEs and small businesses through support bodies across the country, such as chambers of commerce and other business associations, financial institutions and tax accountants.

FREE CONSULTATION

Corporate Law: your first 30 minutes are free

  • ・Handled by Yusuke Abe, admitted in Japan and New York
  • ・Online (Zoom etc.) or at our office in Otemachi, Tokyo
  • ・In English or Japanese
Choose a time for a free consultation

Measures and support schemes listed in the reference material

Besides the consultation desks, the reference material lists the following measures and support schemes.

NameDescription in the reference material
Information Security Guidelines for SMEsPublished by the Information-technology Promotion Agency (IPA). Contains ready-to-use samples and templates of rules, such as a basic information security policy, that also address the requirements of the SCS evaluation scheme, and provides a self-check tool, "Information security self-diagnosis in five minutes"
Information on government support for putting security measures into practiceInformation on government support for implementing cybersecurity measures
Cybersecurity Otasuketai (support team) servicesA one-package service for SMEs that provides, at low cost, services essential to their cybersecurity, such as a consultation desk, monitoring for system anomalies, emergency response support and simple cyber insurance
Digitalisation and AI Adoption Subsidy, security measures categorySubsidises the fees (for up to two years) for introducing Otasuketai services. The cap is JPY 50,000 to JPY 1.5 million, and the subsidy rate is 1/2 for SMEs and 2/3 for small businesses

The reference material describes the SCS evaluation scheme as a scheme that evaluates and makes visible companies' cybersecurity measures against common criteria, to raise the level of security across the whole supply chain.

Contacts

The news release lists as contacts the General Affairs Division of the Small and Medium Enterprise Agency (for the desks and information provision generally), its SMRJ section (for matters concerning the SMRJ), the Management Support Division (for the Yorozu Support Centres) and the Small Business Promotion Division (for societies and chambers of commerce and industry).

Sources

  • METI, "Opening of a special cybersecurity consultation desk for SMEs and small businesses" (27 October 2026, Japanese) https://www.meti.go.jp/press/2026/10/20261027003.html
  • METI, reference material on the special cybersecurity consultation desk (PDF, Japanese) https://www.meti.go.jp/files/000006722.pdf

This page is compiled from material published by government agencies. Please consult a lawyer where a decision is needed on a specific matter.

Free Tools for This Area

Share this article
This article provides general legal information and does not constitute legal advice. For specific legal issues, please consult with a qualified attorney.

More Legal News

Related Articles

Japan APPI Data Breach Reporting for Foreign Companies: Extraterritorial Reach, Deadlines and Notifying Individuals

Foreign companies that supply goods or services to people in Japan can be bound by Japan's data breach reporting duty even without a Japanese office. This guide covers extraterritorial reach, the four reportable situations, the preliminary report (roughly 3–5 days) and final report (30 days, or 60 days for wrongful-purpose incidents), notifying individuals, penalties and the amending act promulgated in July 2026.

Entering Japan as a Foreign Company: Representative Office, Branch or Subsidiary, and the Governing Law of Your Contracts

How a foreign company can enter Japan through a representative office, a branch or a subsidiary, explained against the Companies Act: the ban on continuous transactions before registration, the representative in Japan, KK versus GK, governing law and jurisdiction clauses, Foreign Exchange Act filings, and the October 2025 changes to the Business Manager status of residence.

Director Liability in Japan: Duties, the Business Judgment Rule, Derivative Suits, and D&O Insurance

A practical guide for executives on directors' duties and liability under Japan's Companies Act: the duty of care and loyalty, the business judgment rule (Apamanshop case), conflict-of-interest approvals, subsidiary oversight, how derivative suits unfold, and liability limitation, indemnification and D&O insurance, with a checklist.

Labor Compliance for Japanese Companies: Key Regulations and Penalties

Comprehensive guide to labor compliance for Japanese companies, covering key regulations and penalties.

Intellectual Property Basics in Japan: Patents, Trademarks, and Copyrights

Overview of intellectual property rights in Japan: patents, trademarks, designs, and copyrights.

Shareholders' Meeting Procedures in Japan: From Notice to Resolution

Guide to shareholders' meeting procedures in Japan, including notice requirements and resolution types.

Related Q&A

Related reading

Corporate Law

Entering Japan as a Foreign Company: Representative Office, Branch or Subsidiary, and the Governing Law of Your Contracts

How a foreign company can enter Japan through a representative office, a branch or a subsidiary, explained against the Companies Act: the ban on continuous transactions before registration, the representative in Japan, KK versus GK, governing law and jurisdiction clauses, Foreign Exchange Act filings, and the October 2025 changes to the Business Manager status of residence.

Corporate Law

Japan APPI Data Breach Reporting for Foreign Companies: Extraterritorial Reach, Deadlines and Notifying Individuals

Foreign companies that supply goods or services to people in Japan can be bound by Japan's data breach reporting duty even without a Japanese office. This guide covers extraterritorial reach, the four reportable situations, the preliminary report (roughly 3–5 days) and final report (30 days, or 60 days for wrongful-purpose incidents), notifying individuals, penalties and the amending act promulgated in July 2026.

Corporate Law

Director Liability in Japan: Duties, the Business Judgment Rule, Derivative Suits, and D&O Insurance

A practical guide for executives on directors' duties and liability under Japan's Companies Act: the duty of care and loyalty, the business judgment rule (Apamanshop case), conflict-of-interest approvals, subsidiary oversight, how derivative suits unfold, and liability limitation, indemnification and D&O insurance, with a checklist.

Corporate Law

Labor Compliance for Japanese Companies: Key Regulations and Penalties

Comprehensive guide to labor compliance for Japanese companies, covering key regulations and penalties.

Corporate Law

Intellectual Property Basics in Japan: Patents, Trademarks, and Copyrights

Overview of intellectual property rights in Japan: patents, trademarks, designs, and copyrights.

Corporate Law

Shareholders' Meeting Procedures in Japan: From Notice to Resolution

Guide to shareholders' meeting procedures in Japan, including notice requirements and resolution types.

Attorney Yusuke Abe

Free 30-min consultation

Talk to a lawyer about the issues in this article

Yusuke Abe, admitted in Japan and New York, will handle your matter — in Japanese or English, online or in person.

Book a free consultation