ISMSクラウドセキュリティ認証の概要

Size: px

Start display at page:

Download "ISMSクラウドセキュリティ認証の概要"

きょうすけかたいわ
4 years ago
Views:

1 Copyright JIPDEC ISMS,

2 ISMS ISO/IEC 27017:2015 Copyright JIPDEC ISMS,

3 JIS Q 27001(ISO/IEC 27001) ISO/IEC ISMS ISO/IEC ISO/IEC Copyright JIPDEC ISMS,

4 ISO/IEC 27017:2015 Copyright JIPDEC ISMS,

5 20114 ISO/IEC ISMS ISO/IEC ISO/IEC Copyright JIPDEC ISMS,

6 ISO/IEC ISO/IEC ISO/IEC ISMS ISO/IEC ISO/IEC CS ISO/IEC 27017A CS ISO/IEC CS Copyright JIPDEC ISMS,

7 Copyright JIPDEC ISMS,

8 Copyright JIPDEC ISMS,

9 Copyright JIPDEC ISMS,

10 Copyright JIPDEC ISMS,

11 ISO/IEC ISO/IEC 27017:2015 Copyright JIPDEC ISMS,

12 PII ISO/IEC 27017:2015 Copyright JIPDEC ISMS,

13 / Information security policies) (Policies for information security) (Organaization of information security) (Information security roles and responsibilities) (Contact with authorities) (Human resource security) (Information security awareness, education and training) Asset management) (Inventory of assets) (Labelling of information) Copyright JIPDEC ISMS,

14 / Access control (Access to networks and network services) (User registration and deregistration) (User access provisioning) (Management of privileged access right) (management of secret authentication information of users) (Information access restriction) (Use of privileged utility programs) Cryptographic controls) (Policy on the use of cryptographic controls) (Key management) Physical and environmental security) (Secure disposal or reuse of equipment) Copyright JIPDEC ISMS,

15 / Operations security) (Change management) (Capacity management) (Information backup) (Event logging) (Administrator and operator logs) (Clock synchronization) (Management of technical vulnerabilities) Communications security) (Segregation in networks) (Information security requirements analysis and specification) (Secure development policy) Copyright JIPDEC ISMS,

16 / Supplier relationships) (Information security policy for supplier relationships) (Addressing security within supplier agreements) ICT (Information and communication technology supply chain) Information security incident management) (Responsibilities and procedures) (Reporting information security events) (Collection of evidence) Compliance) (Identification of applicable legislation and contractual requirements) (Intellectual property rights) (Protection of records) (Regulation of cryptographic controls) (Independent review of information security) Copyright JIPDEC ISMS,

17 CLD.6.3 CLD CLD CLD.9.5 CLD CLD Copyright JIPDEC ISMS,

18 CLD CLD CLD Copyright JIPDEC ISMS,

19 Copyright JIPDEC ISMS,

20 ISMS Copyright JIPDEC ISMS,

21 ISMS Copyright JIPDEC ISMS,

22 ISMS JIP-ISMS ISO/IEC 2701 Copyright JIPDEC ISMS,

23 Copyright JIPDEC ISMS,

24 Copyright JIPDEC ISMS,

25 Copyright JIPDEC ISMS,

26 Copyright JIPDEC ISMS,

27 Copyright JIPDEC ISMS,

28 ISMS JIP- ISMS ISO/IEC 27017:2015 ISMS ISMS(JIS Q 27001) ISMS Copyright JIPDEC ISMS,

29 Copyright JIPDEC ISMS,

参考資料 1 既存のセキュリティ要求基準について ISO/IEC 27017:2015 ( クラウドサービスのための情報セキュリティ管理策の実践の規範 )

参考資料 1 既存のセキュリティ要求基準について ISO/IEC 27017:2015 ( クラウドサービスのための情報セキュリティ管理策の実践の規範 ) 参考資料 1 既存のセキュリティ要求基準について ISO/IEC 27017:2015 ( クラウドサービスのための情報セキュリティ管理策の実践の規範 ) 参考情報 Ⅰ: ISO/IEC 27017:2015 項番 / 管理策 5. 情報セキュリティのための方針群 (Information security policies) 昨年度検討との関連 5.1.1 情報セキュリティのための方針群 (Policies