Making Information Security Practical and Easy to Understand

The English version of this podcast will be on a short break until the end of August while I focus on my CISA studies and several ongoing projects.

During this time, I’ll be learning more about IT governance, risk management, auditing, internal controls, IPO readiness, and J-SOX.

I’m also considering sharing my CISA learning journey and practical experiences in future episodes.

My goal is to return in September with new insights, fresh perspectives, and more practical content for security and IT professionals.

Thank you for your support and understanding.

Stay safe.Stay secure.

ISMS does not begin with policies, procedures, or templates.

It begins with understanding your organization.

In this episode, Yoshida explains Clause 4.1 — Understanding the Organization and Its Context, one of the most important foundations of an effective ISMS.

Topics include:

• understanding your business and objectives
• identifying internal and external issues
• recognizing the risks that affect your organization
• avoiding the common mistake of relying only on templates

A practical and easy-to-understand episode for corporate IT teams, managers, and organizations that want to build an ISMS that truly fits their business.

Many people worry about legal issues when using AI.

For example:

• terms of service
• copyright
• personal data
• confidential information

These topics may seem difficult.

But the basic ideas are often simple.

In this episode,

we explain legal and compliance considerations

for AI use in a practical way.

You will learn:

• what to check before using AI
• common legal concerns
• simple ways to reduce risk

👉 Legal teams do not want to stop AI.

They want organizations to use AI safely.

This episode helps you understand the basics

without getting overwhelmed.

When people hear "ISMS," they often think of strict rules to stop data leaks.

But actually, ISMS protects much more than just information.

In this episode, Yoshida talks about the big picture of ISMS.

What does it really protect?

This is a great preparation before learning the actual ISO27001 rules.

We hope this episode helps you ask: "What about our company?"

AI is becoming part of everyday work.

At the same time,

AI-related incidents are increasing.

Many incidents do not start with hackers.

They start with simple mistakes.

For example:

• entering confidential information
• using incorrect AI output
• publishing content without review
• trusting AI too much

In this episode,

we look at common AI-related incidents

and the lessons we can learn from them.

👉 AI incidents are not someone else’s problem.

They can happen in any organization.

This episode helps you understand

how to prepare and reduce risk.

Many companies think ISMS is only about rules and documents.

But in reality, successful companies focus on something different.

They focus on operations that people can actually continue.

In this episode, Yoshida talks about the common characteristics of companies that run ISMS well, even with small teams and limited resources.

A practical and realistic discussion for corporate IT, management teams, and small businesses starting their ISMS journey.

Generative AI is no longer only for IT specialists.

Today, employees across many departments — including sales, HR, accounting, and management — are already using AI in their daily work.

That is why organizations now need more than just “AI tools.”

They need responsible AI usage across the company.

In this episode,

A.9.2 Processes for Responsible Use of AI Systems

from a practical and real-world perspective.

Topics include:

• why AI education matters
• common risks companies overlook
• why simple awareness is more important than difficult technical training
• how to build safe AI habits in the workplace

A practical episode for corporate IT teams, managers, and organizations starting their AI governance journey.

Many companies struggle with one question:

“When does an event become an incident?”

In this episode,

we explain:

• The difference between events and incidents
• Common gray-zone cases
• Why reporting matters

This is a practical guide for real PMS operation.

AI incidents can happen

in any organization.

For example:

• sensitive data is entered
• wrong information is shared
• inappropriate content is published
• copyright issues occur

These problems cannot be fully avoided.

That is why

Incident Management (A.8.2)

is important in AIMS.

In this episode,

we explain simple first actions:

👉 Stop

👉 Check

👉 Report

These steps help reduce damage

and keep the situation under control.

👉 Good preparation helps you stay calm.

This episode gives you

a practical mindset

for handling AI incidents.

P-Mark (PMS) is not just about rules or documents.

It is a system to continuously protect personal data.

In this episode,

we explain the core concept of PMS,

why operations differ by company,

and how it compares with ISMS in a simple way.