What Optima Solutions does

Optima Solutions is a Japan-based professional services consulting firm founded in 2005, specializing in privacy and information security certification. The company guides corporate clients through the acquisition and renewal of P-mark (JIS Q 15001) and ISMS (ISO 27001) certifications — the two dominant information security compliance frameworks in the Japanese market — alongside adjacent standards including AIMS (ISO 42001) for AI governance, ISO 27017 for cloud security, ISO 27701 (PIMS) for privacy information management, ISO 9001 for quality management, and ISO 14001 for environmental management. Supporting services include E-Learning platforms, targeted attack email (phishing) simulation exercises, internal audit support, ongoing advisory retainers, and information security diagnostics. The company has supported over 4,000 consulting cases and operates from offices in Tokyo (headquarters, relocating to Otemachi in June 2026), Osaka (Kansai region), and Nagoya (Chubu region). Named customers span large enterprises (Yamato Transport, Monet Technologies, Coca-Cola Customer Marketing, Francfranc, Jasmy) as well as mid-market and SMB clients across more than a dozen industries.

The company has no proprietary technology platform — its core offering is human-led consulting delivered by a team of 15+ certified consultants. Underlying knowledge assets include a proprietary document template library (privacy protection regulations, personal information registers, internal audit checklists, ISMS statement of applicability) validated through thousands of real audit submissions over 21 years. The firm operates a dual GTM combining direct personal-advisor consulting relationships for enterprise and mid-market clients with a freemium seminar-to-consulting funnel anchored by free hybrid seminars at Tokyo International Forum and on-demand video courses that collectively draw 2,000+ participants annually. Marketing automation runs on HubSpot; content distribution spans blog articles ("Suke-Hachi" series), YouTube, email newsletters, X, Facebook, Instagram, and PR TIMES earned media.

Optima's revenue model is predominantly professional services: project-based, custom-quoted consulting fees that are not publicly disclosed, with multi-year client retention driven by certification renewal cycles. The seminar and E-Learning programs operate as freemium lead-generation and post-sale education channels rather than standalone revenue products. The company is privately held, bootstrapped (no disclosed funding rounds, no PE/VC backing), and founder-led by Koji Naka (formerly of Sony), with no M&A activity, no patents, and no parent company. Customer concentration risk is low given the breadth of disclosed logos, the 4,000+ cumulative case base, and the project-based, non-recurring concentration in any single client. Growth signals point to steady organic expansion through new certification verticals (notably AIMS for AI governance), three-region physical presence, and an expanding co-marketing partner ecosystem anchored by certification body BSI Group Japan.

Name

Optima Solutions

Legal name

オプティマ・ソリューションズ株式会社

Website

https://optima-solutions.co.jp

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Short description

Optima Solutions is a Japan-based consulting firm founded in 2005 that guides corporate clients through privacy and information security certification, primarily P-mark (JIS Q 15001) and ISMS (ISO 27001), plus emerging AI governance (ISO 42001). The company supports enterprise, mid-market, and SMB clients via dedicated consultants, proprietary audit templates, and a free seminar funnel drawing 2,000+ annual attendees.

Ownership category

akta.pro rank

Product category

Privacy and Information Security Certification Consulting

NAICS

Management Consulting Services (54161), Other Scientific and Technical Consulting Services (541690)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

EHS Management Systems & ISO Consulting (ISO 14001/45001) (BPAHAJAF)

Keywords

• Privacy mark consulting
• ISMS certification consulting
• Information security consulting
• P-mark certification services
• ISO certification advisory

Headquarters

HQ city

Nishi

HQ country

Japan

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Others

Revenue model

1. Certification Consulting Services: Core revenue stream from one-on-one and ongoing consulting engagements helping client companies obtain and maintain P-mark, ISMS, and other certifications. Consultants provide regular check-in meetings, document preparation support, internal audit assistance, and pre-assessment review. Revenue is project-based with multi-year client retention through certification renewal cycles.
2. Seminars and Training Programs: Free introductory seminars (P-mark acquisition, ISMS acquisition) generate leads for consulting services. Update seminars, workshops, and E-Learning programs may be offered at no cost or as premium content to generate qualified leads and serve the existing client base.
3. E-Learning and On-Demand Content: On-demand video seminars on P-mark, ISMS, and related topics available for free streaming with materials downloads, used as a top-of-funnel acquisition tool and post-sale client education.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

Optima Solutions provides one-on-one consulting services that guide Japanese companies through the acquisition, maintenance, and renewal of Privacy Mark (P-mark/JIS Q 15001), ISMS (ISO 27001), and related ISO certifications (ISO 42001/AIMS, ISO 27017 cloud, ISO 27701/PIMS, ISO 9001, ISO 14001). Each engagement assigns a dedicated consultant who conducts document preparation, internal audit support, regular progress meetings, and pre-assessment review through certification audit and multi-year renewal cycles.

Product overview

Optima Solutions operates as a compliance and certification consulting firm offering a comprehensive portfolio of services centered on privacy mark (P-mark) and information security management system (ISMS) certifications. The core product suite comprises P-mark acquisition and renewal consulting, ISMS acquisition and renewal consulting, and AIMS (AI Management System) certification consulting. These primary offerings are complemented by specialized certification services including cloud security (ISO 27017), privacy information management (ISO 27701/PIMS), ISO 9001 (quality management), and ISO 14001 (environmental management). Supporting services include E-Learning for remote personnel education, targeted attack email exercises for security awareness training, internal audit support, advisory services, and information security diagnostics. The company also provides structured seminar programs covering P-mark acquisition, ISMS certification, ransomware countermeasures, and AI governance topics. Founded in 2005 with over 4,000 consulting cases completed, the firm positions itself as the 'information security Shinsengumi' protecting corporate and social information security.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• 90%+ participant satisfaction across all seminar programs
• +2 more outcomes

Named customers18 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Five partnerships are on record, tiered core and supporting.

• Cyber Security Research Institute (サイバーセキュリティ総研)coreGTM or Marketing Partner · 27 November 2025Optima's representative (Privacy Samurai) featured as keynote speaker at SECURITY X 2025 WINTER online conference organized by Cyber Security Research Institute. Event attracted over 500 registrants. Optima's talk on AI-era ISMS strategy positioned the company as thought leader within the broader cybersecurity community.
• Elcamy (株式会社Elcamy)supportingGTM or Marketing Partner · 16 April 2025Elcamy's representative joined the April 2025 AIMS certification seminar as a guest speaker alongside Optima consultants and BSI Group Japan, sharing an AI services company's practitioner perspective on AI governance. Both companies cross-promoted the event to their respective audiences.
• BSI Group Japan (BSIグループジャパン)supportingTechnology or Integration · 16 April 2025BSI Group Japan (certification body) participated in the April 2025 AIMS certification seminar, providing authoritative insight on ISO42001 certification scheme status and audit/registration processes. BSI is one of the world's leading standards and certification bodies.
• Iroba (アイロバ)coreStrategic or Co-development Partner · 17 January 2024Co-sponsored seminar series on ISO27001:2022 revision and enterprise security. Iroba's cybersecurity division (represented by Akane Akaneba, Certified Ethical Hacker) provided technical content on practical security measures complementing Optima's certification expertise. Joint seminars were held January 2024 and promoted to combined customer bases of both companies.
• M-Oetext (エムオーテックス)supportingStrategic or Co-development Partner · 3 August 2023Co-hosted ISMS new standard seminar (August 2023) with M-Oetext presenting LANSCOPE product information as part of the security solution ecosystem. Joint webinar format with Q&A combining certification guidance from Optima and product demonstration from M-Oetext. Re-aired as missed-delivery (rerun) content August 2023.

Scale indicators4 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• LAC Co., Ltd. Japanese cybersecurity firm providing ISMS/P-mark certification support, security consulting, and managed security services. Comparable as a mid-sized Japanese security specialist with similar target buyers and consulting methodology.
• NRI Secure Technologies: Nomura Research Institute's cybersecurity subsidiary offering ISMS/ISO 27001 certification consulting, security diagnostics, and managed security services to Japanese enterprises. Most directly comparable in ISMS/P-mark advisory, though larger and broader in security operations.
• Riskmonster.com: Japanese compliance and internal control specialist offering P-mark, ISMS, and internal audit support consulting to mid-market and enterprise clients. Closely comparable niche positioning with overlapping certification consulting offerings.
• Information Security Research Center of Japan (ISRJC) / NPO ISS Square: Japanese non-profit and security specialist organizations active in P-mark/ISMS consulting, training, and audit preparation — overlapping with Optima's SME and mid-market certification advisory focus.

Broad incumbents

• PwC Consulting Japan: Big-4 consultancy providing information security, privacy, and ISO certification advisory as part of broader risk and digital transformation engagements. Targets the same large-enterprise buyers as Optima's enterprise tier.
• Deloitte Tohmatsu Risk Advisory: Big-4 risk advisory practice offering ISMS/ISO 27001 implementation, cyber risk, and privacy consulting to large Japanese enterprises. Competes with Optima for group-wide certification projects, bundled into larger transformation mandates.
• NTT Security Japan: Subsidiary of NTT providing enterprise cybersecurity services including ISMS consulting, security diagnostics, and SOC services across Japan. Larger incumbent with broader portfolio that competes for enterprise certification engagements.
• EY Advisory Japan: Big-4 advisory offering cyber, privacy, and ISMS consulting services in Japan, often as part of larger compliance and risk transformation programs. Competes for enterprise certification consulting RFPs.
• KPMG AZSA LLC: Big-4 advisory in Japan providing information security, ISO certification, and privacy consulting under its risk consulting practice. Comparable enterprise-focused offering with broader service portfolio.

Others

• JIPDEC (Japan Information Processing Development Center): Semi-governmental body that administers Japan's P-mark program and operates related privacy/ISMS evaluation frameworks. Adjacent ecosystem participant — both a potential partner and indirect competitor given its role setting certification standards Optima helps clients achieve.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/pr_optima
• YouTubeyoutube.com/user/OptimaSolutionsInc
• Facebookfacebook.com/optima.solutions.jp
• Instagraminstagram.com/pr_optima

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Optima Solutions