ServiceNow Japan, NTT and CP-SOL partner on integrated cybersecurity services
ServiceNow, NTT and CP-SOL are building one security service for IT, OT and IoT
ServiceNow Japan, NTT Security Holdings and Crosspoint Solutions began a cybersecurity partnership on October 26, 2026, starting with vulnerability management for IT, operational technology and IoT devices. The companies plan to expand the service toward managed security operations center work during fiscal 2027.
That sounds significant. It is, especially for companies with factories, medical equipment, building controls or a large collection of connected devices. For a typical 30-person office, though, this announcement does not change what we would spend money on this month.
What the first service is supposed to do
The first offering will use Armis to find devices without installing an agent on each one. ServiceNow Japan says the information will connect with its configuration management database, or CMDB. That gives the companies a way to tie a device to its owner, business role and known security issues.
The practical goal is not simply to produce a larger list of vulnerabilities. It is to help decide which problem deserves attention first. A flaw on a business-critical system should rank differently from the same flaw on an unused device. The service is intended to consider asset importance and the effect a compromise could have on the business.
That distinction matters. Most small businesses do not have a shortage of security alerts. They have a shortage of time and people who can determine what to fix first.
Why OT and IoT make this harder
Standard office computers are relatively easy to identify and update. Industrial controllers, building systems, cameras, printers and medical devices can be different. Some cannot accept normal security software. Others cannot be patched during business hours, or cannot be patched at all without vendor involvement.
Armis is intended to give the partners visibility across those device types. NTT Security Holdings will add security advisory work, implementation support and experience with operational technology. CP-SOL is expected to handle security operations center design, staffing, vulnerability response and initial incident response.
That is a sensible division of work. Finding a vulnerable device is only the beginning. Someone still has to confirm what it does, determine whether a fix is safe, and document the decision if the fix must wait.
What this means for a small business in San Diego County
We would not buy this service simply because it includes the names ServiceNow, NTT and Armis. Pricing, availability, service-level commitments and the final technical design have not been announced. The launch date is also unclear.
For a small office with Microsoft 365, laptops, a firewall and a few wireless access points, the immediate priorities remain ordinary ones. We would verify that every account uses multifactor authentication. We would check backup recovery instead of assuming backups work. We would remove unsupported devices and make sure critical patches are being applied.
That work will protect the business sooner than waiting for a future managed service to become available. The partnership is more relevant to a manufacturer, clinic, property operator or company with connected equipment spread across multiple sites.
Our view on the planned SOC expansion
A 24-hour monitoring service can help a company that cannot staff security coverage overnight. It can also become an expensive alert mailbox if nobody has permission to contain a device, contact the right manager or make a decision during an incident.
We would ask for clear answers before considering the offering. What devices are covered? Does monitoring include the company’s existing cloud and endpoint tools? Who responds after an alert? How quickly will someone act? What happens when a production system cannot be patched? Which work is included in the monthly fee?
The planned move toward a SOC during fiscal 2027 could be useful if those answers are specific. A single system for asset information, risk ranking and remediation records could reduce the gaps that appear when different vendors manage different parts of a network. But the product is still being developed, and there is no reason to treat the announcement as a finished service.
For now, ask your IT provider for a current device inventory and a list of the five vulnerabilities that deserve attention first. IT911Now can help with that review, and the result will tell us whether a future integrated service would solve a real problem or simply add another subscription.