Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesJapan’s current central cybersecurity office is the National Cybersecurity Office (NCO), not an officially verified body called “NCSH.” The NCO’s Japanese name is 国家サイバー統括室. It was established in July 2025 when the former National center of Incident readiness and Strategy for Cybersecurity (NISC) was reorganized after cybersecurity legislation was enacted in May 2025.
The NCO supports Japan’s Cybersecurity Strategic Headquarters, monitors threats to government information systems, investigates serious cybersecurity events, advises government departments, conducts audits, and coordinates policy. Japan’s 2025 Cybersecurity Strategy describes it as a government-wide “control tower” for cyberspace initiatives related to national security, working closely with the National Security Secretariat. That coordination role does not by itself prove that the NCO directly commands every ministry, private company, or incident responder.
As an Amazon Associate I earn from qualifying purchases.
The “NCSH” name needs a correction
Official Japanese government material reviewed for this article does not identify a current organization by the acronym NCSH. The verified current English name is the National Cybersecurity Office, abbreviated NCO. Its Japanese name is 国家サイバー統括室.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →The change follows a major institutional reorganization. Japan established the NCO in July 2025, after the Cybersecurity Capability Enhancement Act and related legislation were enacted in May 2025. The former National center of Incident readiness and Strategy for Cybersecurity, commonly known as NISC, was reorganized into the new office.
#1 Best Overall
Readers may still encounter NISC in older documents, search results, news reports, or references to the pre-2025 structure. In current government terminology, NCO is the name to use. “NCSH” may be a mistaken rendering, an unofficial shorthand, or a confusion with another cybersecurity body, but the official sources do not confirm it as the office’s name.
Beware of impersonation calls
The NCO’s current Japanese website warns that suspicious callers have used the names of NCO or NISC while demanding money. The warning is about impersonation; it does not mean that the office normally solicits payment by telephone. A caller who asks for money, account credentials, remote access, or urgent transfers while claiming to represent either office should be treated as a potential scam and verified through an independently located government contact channel.
What the National Cybersecurity Office is
The NCO is an office within Japan’s central government structure. The Cabinet Secretariat describes it as supporting the Cybersecurity Strategic Headquarters. Its role combines technical oversight, investigation, assistance to government organizations, auditing, policy work, and secretariat functions.
Free tools Windows power users keep installed
One-click scans. No signup required.
The Cabinet Secretariat Organization Order gives the office its formal assignment in Article 4-2. Those statutory duties matter because they define what the office is empowered and required to do; they are more precise than broad descriptions of the NCO as Japan’s “cyber agency.”
| Assigned function | What it means in practice | What the sources do not establish |
|---|---|---|
| Monitor and analyze unauthorized activity | Watch for and assess unauthorized activity directed at government information systems. | That the NCO itself operates every government network sensor or handles every alert. |
| Investigate serious events | Investigate causes of serious events that threaten government cybersecurity, except matters assigned to the Cabinet Intelligence and Research Office. | A single public incident-response procedure or automatic transfer path for every event. |
| Provide assistance | Give government departments advice, information, and other support related to cybersecurity. | That every ministry must surrender operational control to the NCO. |
| Conduct audits | Examine cybersecurity arrangements and compliance within the scope of its assignment. | The frequency, public methodology, or results of every audit. |
| Plan and coordinate policy | Help develop and align broader cybersecurity measures across government. | That the office directly regulates all private-sector organizations. |
| Support strategic bodies | Perform secretariat work for the Cybersecurity Council and the Cybersecurity Strategic Headquarters. | That the NCO replaces those bodies or makes every policy decision independently. |
How Japan’s government-wide coordination is designed to work
Japan’s 2025 Cybersecurity Strategy says the country needs a unified, government-wide implementation framework. For cyberspace initiatives connected with national security, the strategy positions the NCO as a “control tower”: an organization responsible for robust, comprehensive coordination rather than an isolated technical department.
The National Cyber Director and the National Security Secretariat
The NCO is headed by the National Cyber Director. The director concurrently serves as Deputy Secretary General of the National Security Secretariat. That dual role is intended to connect cyber policy with national-security planning and to let the office coordinate closely with the Secretariat on security-related cyberspace initiatives.
The “control tower” description comes from Japan’s 2025 Cybersecurity Strategy. It should be read as a description of a coordinating function, not as proof that one office physically operates every government system or commands every organization involved in a cyber incident.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallThe Cybersecurity Strategic Headquarters
The NCO serves as secretariat to the Cybersecurity Strategic Headquarters. A secretariat prepares materials, supports meetings, organizes information, and helps turn decisions into coordinated administrative work. This gives the NCO a formal connection to the government’s strategic cybersecurity decision-making body.
The arrangement separates two ideas that are often blurred in short summaries:
- The Cybersecurity Strategic Headquarters is the strategic government body that sets direction and makes decisions within its mandate.
- The NCO provides administrative, analytical, investigative, auditing, and coordinating support to help that direction be implemented.
Government Security Operation Coordination
The NCO’s official overview also refers to the Government Security Operation Coordination team (GSOC), described as a real-time, government-wide monitoring team. The available official material is not detailed enough to establish GSOC’s precise current organizational structure or the exact relationship between every GSOC function and every NCO unit. It is safest to understand GSOC as operational-monitoring context within Japan’s wider government cybersecurity framework, not as evidence that the NCO personally runs every response.
What coordination can look like under the assigned duties
The statutes and strategy establish responsibilities, but they do not publish a complete incident playbook for the public. The following sequence shows how the assigned functions fit together conceptually; it is not a claim that every event follows these exact steps.
Recommended Free Tools
- Detection and analysis: Unauthorized activity affecting a government information system can be monitored and analyzed within the government’s security operations.
- Assessment: Officials determine whether activity is routine, suspicious, or serious enough to threaten government cybersecurity.
- Assistance to the affected department: The NCO can provide advice, information, and other assistance to the responsible government department.
- Investigation of serious events: If an event meets the serious-event threshold, the NCO is assigned to investigate its causes, subject to the stated exception for matters assigned to the Cabinet Intelligence and Research Office.
- Audit and corrective work: Auditing and policy functions can be used to examine controls and improve measures after an event or as part of continuing oversight.
- Strategic coordination: Relevant findings can feed the Cybersecurity Strategic Headquarters, the Cybersecurity Council, broader government policy, and national-security coordination through the National Security Secretariat.
This model explains why the NCO is more than a monitoring center. It links technical information, investigation, assistance, audit work, and policy coordination. At the same time, the public sources do not specify the trigger thresholds, timelines, reporting forms, classified-information rules, or chain of command for a particular incident.
What the NCO does not necessarily control
Calling the NCO Japan’s cybersecurity “control tower” can create an exaggerated picture of centralized command. The legal and strategy documents support a government-wide coordinating role, but they do not establish that the NCO directly commands every ministry, local authority, private company, critical-infrastructure operator, or commercial incident-response provider.
Individual ministries and agencies still have their own systems, personnel, legal responsibilities, and operational decisions. The NCO can monitor, investigate, advise, audit, and coordinate within its assigned remit. Other bodies may own the affected system, carry out technical remediation, enforce sector-specific rules, manage law-enforcement matters, or handle intelligence responsibilities.
Private companies are particularly important to distinguish. The cited material describes the NCO’s government duties and national-security coordination. It does not say that every Japanese company reports every cyber event directly to NCO or that NCO automatically takes over a company’s incident response.
Rank #4
NISC and NCO: what changed?
| Point of comparison | Former NISC | Current NCO |
|---|---|---|
| Official English name | National center of Incident readiness and Strategy for Cybersecurity | National Cybersecurity Office |
| Japanese identity | The predecessor organization before the 2025 reorganization | 国家サイバー統括室 |
| Status in the current structure | Reorganized in July 2025 | Established in July 2025 |
| Legislative context | Preceded the May 2025 cybersecurity legislation | Created after enactment of the Cybersecurity Capability Enhancement Act and related legislation in May 2025 |
| Current shorthand | NISC remains relevant when discussing historical documents or the former office | NCO is the verified current acronym in official English material |
| Core relationship to strategy | Part of Japan’s earlier cybersecurity coordination framework | Supports the Cybersecurity Strategic Headquarters and serves as the national-security coordination “control tower” described in the 2025 strategy |
The table describes an institutional transition, not a claim that every employee, system, or procedure changed overnight. Older NISC guidance can remain useful for historical context, but readers should check whether a current Japanese government page now attributes the function to NCO.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How the NCO fits with other Japanese security bodies
Cabinet Secretariat
The Cabinet Secretariat provides the administrative setting in which the NCO and the Cybersecurity Strategic Headquarters operate. The Cabinet Secretariat’s public descriptions are also the source of the office’s listed work areas, including monitoring, investigations, assistance, audits, and policy coordination.
National Security Secretariat
The National Security Secretariat is not the same organization as the NCO. Their connection is strengthened because the National Cyber Director concurrently serves as Deputy Secretary General of the Secretariat. This arrangement supports coordination where cyber issues overlap with national security, while preserving the distinction between the two institutions.
Cabinet Intelligence and Research Office
The Organization Order specifically excludes from the NCO’s serious-event investigation duty matters assigned to the Cabinet Intelligence and Research Office. That exception shows that Japan’s cyber governance includes boundaries between institutions rather than one office possessing every investigative responsibility.
Ministries and government departments
Government departments remain the owners and operators of many systems affected by cyber risk. The NCO’s assistance, audit, and coordination functions are designed to help align those departments, not to erase their individual responsibilities.
Best Value
Why the naming distinction matters to readers
Using NCO instead of NCSH or NISC is not merely a style preference. Correct naming helps in four practical situations:
- Finding current guidance: Searches for the current office should use “National Cybersecurity Office” and 国家サイバー統括室.
- Reading older documents: References to NISC may describe the predecessor structure and should be dated accordingly.
- Evaluating claims: A website or caller using “NCSH” should not automatically be treated as an official Japanese government source.
- Recognizing scams: The NCO’s warning about impersonation calls makes it especially important to verify unexpected requests independently.
Common questions about Japan’s cyber office
Is NISC still Japan’s cybersecurity office?
NISC was the former office. Japan reorganized it and established NCO in July 2025. NISC can still appear in historical material, but NCO is the current official English name identified by the government sources described here.
Does NCO investigate every cyberattack in Japan?
No such universal authority is established by the cited documents. The Organization Order assigns NCO investigations of serious events that threaten government cybersecurity, with an exception for matters assigned to the Cabinet Intelligence and Research Office. That is narrower than investigating every attack against every public or private organization.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Is the NCO a police agency?
The listed functions are monitoring, analysis, serious-event investigation, assistance, audits, policy planning, coordination, and secretariat work. The sources do not describe NCO as a general police agency or as a replacement for law-enforcement bodies.
Does the NCO run Japan’s national cyber defenses by itself?
The 2025 strategy gives NCO a government-wide coordinating role, especially for national-security-related cyberspace initiatives. The sources do not say that NCO operates every defense system or directly controls every ministry and private organization.
What should I do if someone calls claiming to be from NCO or NISC?
Do not send money or disclose credentials because of an unsolicited call. End the call, record the details, and verify the organization through an official government website or a known contact method that you locate independently. The Japanese NCO website specifically warns about suspicious calls made in the names of NCO or NISC.
The practical bottom line
Japan’s current central government cybersecurity office is the National Cybersecurity Office (NCO), established in July 2025 after NISC was reorganized. Its legal assignment covers monitoring and analyzing unauthorized activity against government systems, investigating serious government cybersecurity events, helping departments, conducting audits, coordinating policy, and supporting the Cybersecurity Strategic Headquarters and Cybersecurity Council.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Japan’s 2025 Cybersecurity Strategy adds the strategic explanation: for national-security-related cyberspace initiatives, NCO is intended to function as a government-wide coordination “control tower” in close cooperation with the National Security Secretariat. That makes NCO a central integrator of information, investigation, assistance, oversight, and policy—not proof of unlimited command over every cyber actor in Japan. Because the acronym “NCSH” is not confirmed in the current official sources, readers should use NCO and 国家サイバー統括室 when looking for current information.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
