Wiz says it is not yet on Japan’s ISMAP cloud list
Original title: Wiz and ISMAP: Building the Foundation for Japan's Public Sector
Wiz plans to start an external ISMAP assessment in early 2027 after a completed gap analysis.
Wiz said Japanese government agencies must, in principle, buy cloud services registered on the ISMAP Cloud Service List, and that Wiz is not listed. The company says it has held ISO 27001, ISO 27017, ISO 27018, SOC 2, PCI DSS, and FedRAMP certifications and reports for five years and finished an internal gap assessment against current and proposed ISMAP controls. It has engaged an ISMAP-registered audit firm and targets a formal external audit in early 2027. Wiz says using its product does not by itself verify ISMAP compliance.
Unconfirmed: The early 2027 audit start is Wiz’s target plan, not a confirmed registration date.
- ISMAP has no official in-progress or provisional status.
- Proposed control revisions and their schedule remain subject to change, Wiz says.
- Registration requires Japanese-language support, audit trails, and later renewal audits.
- ISMAP draws on JIS Q 27001, JIS Q 27017, ISO/IEC 27018, and NIST SP 800-53.
From the original article
3 min read at wiz.io
A transparent look at our gap assessment, our ISO alignment, and our plan to earn a spot on Japan's government cloud service list
By Zlatko Unger · wiz.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.