Japan's Financial Services Agency (FSA) has announced a new cybersecurity framework for cryptocurrency exchanges, emphasizing a three-pillar approach of "self-help, mutual help, and public help." Starting in the 2026 fiscal year, licensed crypto exchanges in Japan will be required to conduct mandatory Cybersecurity Self-Assessments (CSSA) and enhance overall security standards. Additionally, the FSA plans to implement Threat-Led Penetration Testing (TLPT) for major platforms to bolster the industry's defenses against hacking and supply chain risks.