In 2015, Japan Pension Service was faced with massive data leakage exposing 1.25 million cases of contributors or beneficiaries caused by a series of targeted attacks. In the aftermath, people’s concern spread over the security of upcoming Social Security and Tax Number System. The Government urged local governments to upgrade security levels of computer systems so that people’s “My Numbers” (social security numbers) are secure. Subsidies were broadly distributed to prefectures and municipalities.
SAI Japan audited prefectures and municipalities to examine if the security levels were enhanced effectively by the subsidies, and submitted the report to the Diet and the Cabinet in January 2020. This Paper will give a briefing on the findings of the audit report which are composed of 1) if two-factor authentication system and restriction on take-out of information work well; 2) if My Numbers are securely handled in a separated system; 3) if the common gateway offered to municipalities is effectively operated; and 4) if local governments are ready to maintain the enhanced information security level.