Digital Fortress: US-Japan Tech Alliance Secures Defense Supply Chains

HERNDON, Va. – August 20, 2026 – In a significant move to reinforce the digital backbone of international defense, Fujitsu Limited has launched its “Fujitsu Trusted Supplychain Service” in Japan, powered by technology from U.S. cybersecurity specialist Exostar. The initiative represents more than a new software offering; it’s the architectural blueprint for a unified security front, designed to protect the increasingly interconnected and vulnerable supply chains of allied nations against a rising tide of sophisticated cyber threats.

This collaboration directly addresses the convergence of stringent cybersecurity mandates sweeping across the globe. As the United States solidifies its Cybersecurity Maturity Model Certification (CMMC) program, Japan has moved in lockstep, embedding similar standards based on the U.S. NIST SP 800-171 framework into its own defense acquisition rules and its landmark Economic Security Promotion Act of 2022. The result is a complex regulatory landscape that demands a new class of solution—one that can build a common trust layer for multinational collaboration while respecting national sovereignty. The partnership between the Japanese technology giant and the Virginia-based security firm aims to be precisely that solution, creating a secure digital environment for Japan’s critical defense and infrastructure sectors.

The Regulatory Gauntlet: A Proactive Defense Strategy

The timing of this launch is no coincidence. Japan has been undertaking a radical overhaul of its national cybersecurity posture, shifting from a historically reactive stance to one of proactive, “active cyber defense.” This strategic pivot is codified in a series of powerful legislative and policy updates. The Economic Security Promotion Act, for instance, places cybersecurity at the heart of national security, mandating robust protections for critical infrastructure operators.

Simultaneously, Japan's Ministry of Defense and its Acquisition, Technology & Logistics Agency (ATLA) have made compliance with NIST SP 800-171—the same standard underpinning America's CMMC—a prerequisite for defense contractors. This alignment is a deliberate strategy to ensure interoperability and shared security standards with its primary ally, the United States. For the hundreds of Japanese companies that form the nation's defense industrial base, from major conglomerates to specialized subcontractors, this is a watershed moment. The theoretical need for better security has become a concrete, auditable business requirement.

This new reality creates a significant operational and financial burden. Building and maintaining an IT environment that meets these rigorous standards is a complex undertaking, particularly for small and mid-sized suppliers who are often the most vulnerable link in the supply chain. Fujitsu’s new service, built on Exostar’s proven platform, is designed to alleviate this burden by providing a cost-effective, managed path to compliance and security, effectively democratizing access to defense-grade cybersecurity.

A Technical Bridge Across the Pacific

At the core of the “Fujitsu Trusted Supplychain Service” is Exostar’s secure environment building technology, based on its “Exostar Managed on Microsoft 365” solution. This is not merely an application but a managed digital enclave—a controlled, fortified workspace designed to protect sensitive information like Controlled Unclassified Information (CUI) from exposure.

The system's credibility stems from its pedigree. Exostar’s technology is battle-tested, serving as a trusted platform for more than half of the U.S. Defense Industrial Base. It operates within a Microsoft GCC High environment, which carries a FedRAMP Moderate Equivalency, certifying it for use with the U.S. government’s most sensitive, unclassified data. The platform provides a suite of essential security controls, including centralized identity and access management, multi-factor authentication, granular information-sharing policies, and audit-ready activity logging.

What makes the implementation in Japan particularly innovative is how it pairs this U.S. defense-grade security architecture with stringent local requirements. To ensure data sovereignty, the entire service is operated on Fujitsu's domestic data centers, which are registered under Japan's Information System Security Management and Assessment Program (ISMAP). All monitoring and support are handled by Fujitsu specialists within Japan. This hybrid approach offers Japanese companies the best of both worlds: a globally trusted security model that operates entirely within their national borders, mitigating risks associated with foreign data access laws.

“We are honored to provide our secure MM365 environment building technology for Fujitsu's 'Fujitsu Trusted Supplychain Service,'” said Stuart Wilson, Senior Vice President of Product at Exostar. “Through our collaboration with Fujitsu, we are helping organizations in Japan address these defense and critical infrastructure challenges with a proven solution that combines secure collaboration, compliance support, and operational efficiency.”

From Forum to Fortress: An Evolving Partnership

This ambitious initiative did not materialize overnight. It is the culmination of a strategic relationship between Exostar and Fujitsu that began in 2019. That year, Fujitsu first integrated Exostar's secure identity and collaboration tools into its “Fort# Forum” offering, an initial step to help Japanese suppliers navigate the then-emerging NIST SP 800-171 requirements.

That early collaboration served as a proving ground, demonstrating the market need and the technical viability of a joint solution. As Japan’s cybersecurity regulations formalized and the threat landscape intensified, the partnership evolved. The new “Fujitsu Trusted Supplychain Service” represents a significant expansion of that original vision, moving from a niche offering to a foundational platform for a much wider community of suppliers across both defense and critical infrastructure.

This evolutionary path highlights a key insight for modern business leaders: building resilient organizations requires long-term, adaptive partnerships. The journey from a limited forum to a national-level security platform shows how sustained collaboration can build the trust and technical integration necessary to tackle systemic, ecosystem-wide challenges.

The launch points to a broader blueprint for how allied nations can and must secure their shared industrial bases. As global supply chains become more integrated, the security of one nation is inextricably linked to the security of its partners. Solutions that enable secure, cross-border collaboration without creating unnecessary complexity or violating data residency laws are no longer a luxury but a strategic necessity. By creating a common, compliant trust layer, this initiative provides a powerful model for strengthening collective defense in the digital age, ensuring that the flow of sensitive information is as secure as the physical components it represents.