ISMAP
Also known as: ISMAP, ISMAP-LIU, Japan ISMAP
Information system Security Management and Assessment Program (Japan) — ISMAP Steering Committee (Government of Japan)
Official site Official change log
Japan's FedRAMP: a cloud service must be on the ISMAP register before a government body may procure it, and registration is granted against the ISMAP control baseline derived from ISO/IEC 27001, 27017 and NIST SP 800-53. The baseline and the programme rules are revised several times a year, and ISMAP-LIU extends the same machinery to lower-risk services.
Timeline
No changes recorded yet — we are watching, and nothing has been published.
Monitoring
Watched by 1 official source. Watching since 20 September 2026.