CyLeague and Quest have decided to work together on a problem that keeps showing up in manufacturing. Cybersecurity breaks down at the supply chain level, not inside one company. This collaboration brings Quest together with CyLeague Holdings, the cybersecurity arm under Change Holdings, to raise the overall level of security in manufacturing and semiconductor ecosystems.
Supply chain complexity manifests in almost all industries nowadays, and is found more pronounced in semiconductors in particular. Development, production, maintenance, and operations involve many different companies. The problem is that security maturity is uneven. Some companies invest heavily. Others do the bare minimum. Attackers look for these gaps and use weaker partners as entry points. Once inside, the damage spreads across connected businesses.
This is why the semiconductor sector matters so much. It affects Japan’s industrial base as a whole. The government is already pushing security strengthening in this area because a single incident can disrupt production far beyond one firm.
Also Read: Cisco, NRI and NRI Secure Strengthen Japan Digital Trust
CyLeague has been working around the idea of cyber resilience. Assume incidents will happen and focus on keeping the business running. Its strength lies in incident response and security consulting. Quest comes from a different angle. Years of system integration and staffing work. Strong relationships on the ground in manufacturing and semiconductor sites.
The collaboration is built around three concrete actions. First, linking daily security monitoring with incident response so decisions can be made quickly when something goes wrong. Second, assessing risks across entire supply chains starting from major manufacturers, not isolating evaluations company by company. Third, providing continuous support from problem identification and policy design through actual on-site implementation and operations.
They will start with semiconductors and then look at expanding into other manufacturing fields. The bigger goal is to make cyber resilience part of how supply chain security is done in Japan, not an afterthought.

