Information Security Management System ISMS Copyright JIPDEC ISMS,

ISMS Copyright JIPDEC ISMS, 2005 1

22 23 ISO SC27 ISO SC27 ISO/IEC 17799 ED 6/26 8/27-4/11 12/10 6/25 24 ISO SC27 25 26 ISO SC27 ISO SC27 ED ED 6/26 9/19 9/19 6/5 27 28 29 30 31 ISO SC27 ISO SC27 ISO SC27 ISO SC27 ISO SC27 1st CD 2nd 1st CD CD 6/6 9/6 9/5 2/18 2/19 5/19 FCD FDIS 2 6/17 10/1 10/2-2/10 2/11 IS 5/23 6/15 Stage 2 Stage 3 4/12-5/22 5/23-6/14 Stage 4 Stage 5 Copyright JIPDEC ISMS, 2005 5

27 ISO SC27 28 ISO SC27 29 ISO SC27 30 ISO SC27 31 ISO SC27 32 ISO SC27 33 ISO SC27 ISMS Justification Study *G72 NP 7/1 10/1 IS 9/13 FDIS FCD JTC1 6/30-7/1 9/30 11/30-3/31 8/30 9/13-10/14 10/13 Stage 0 Stage 1 2 Stage 4 Stage 3 8/31-9/12 Stage 5 Copyright JIPDEC ISMS, 2005 7

ISO/IEC ISO/IEC JTC1/SC27 Information technology Security Security techniques WG1 WG2 WG3 Requirements, Security techniques Security Evaluation Security Services, and mechanisms criteria Guidelines,, Copyright JIPDEC ISMS, 2005 9

2005 2006 2007 2008 1 4 7 10 1 4 7 10 1 4 7 10 1 4 7 10 ISMS Ver.2.0 ISO/IEC 27001 2005 JIS Q 27001 ISO/IEC 27001 JIS Ver.2.0 Ver.2.0 Ver.2.0 JIS Q 27001 JIS Q 27001 JIS Q 27001 JIS Q 27001 10/15 JIS 6 Ver.2.0 JIS Q 27001 12 12 6 Ver.2.0 JIS Q 27001Ver.2.0 JIS Q 27001 Ver.2.0 JIS Q 27001 18 200511 Ver.2.0 ISMS (Ver.2.0) Copyright JIPDEC ISMS, 2005 16

0 0 1 1 2 2 ISO/IEC 27001 3 3 4 4 5 6 ISMS 5 6.4 ISMS Ver.2.0 7 ISMS 8 ISMS 6 7 Copyright JIPDEC ISMS, 2005 21

A A.5 3. A.6 4. A.7 5. A.8 6. ISO/IEC 27001 A.9 A.10 A.11 A.12 7. 8. 9. 10. ISMS Ver.2.0 A.13 A.14 A.15 11. 12. Copyright JIPDEC ISMS, 2005 22

1. 2. 3. 4. Copyright JIPDEC ISMS, 2005 23

ISO/IEC 27001 2005 ISMS Ver.2.0 133 127 +7-4 A.8.1 A.8.2 A.8.3 A.10.2 A.10.9 A.12.6 A.13.2 4. 3 6. 1 6. 2 7. 3 +17 A.6.1.1 A.6.1.7 A.6.2.2 A.7.1.2 A.7.1.3 A.8.2.1 A.8.3.1 A.8.3.2 A.8.3.3 A.9.1.4 A.10.2.1 A.10.2.2 A.10.2.3 A.10.4.2 A.10.9.2 A.10.10.3 A.12.6.1-11 4.(1) 4.(1) 4.(3) 6.(3) 8.(1) 9.(4) 9.(5) 10.(3) 10.(3) 10.(3) 9.(4) Copyright JIPDEC ISMS, 2005 24

Copyright JIPDEC ISMS, 2005 25 7 6 5 4 3 2 1 --- A.10.2 6.(2) A.8.2 6.(1) A.8.1 8.(7) 10.8 10.9 A.10.9 --- A.8.3 ---- A.12.6 --- A.13.2 6.(3) 6.(3) 8.(1) 12.(1) A.13 4 3 2 1 7(3) A.11.3.3 7(3) A.9.2.7 7.(3) 7.(3) 7.(3) A.8.2 6.(2) A.8.1 6.(1) A.6.2 4.(3)

Copyright JIPDEC ISMS, 2005 26 11 10 9 8 7 6 5 4 3 2 1 A.6.1.1 4.(1) A.13.1.1 9.(5) A.11.4.2 9.(4) A.12.3.1 10.(3) A.12.3.1 10.(3) A.12.3.1 10.(3) A.13.1.1 6.(3) A.6.2.3 4.(3) A.6.1.1 4.(1) 9.(4) A.10.2 8.(1) 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 4.(1) A.6.1.1 --- A.8.3.3 --- A.8.3.2 --- A.10.4.2 --- A.10.2.3 --- A.10.2.2 --- A.10.2.1 7.(1) A.9.1.3A.9.1.4 A.9.1.4 --- A.8.2.1 --- A.7.1.3 --- A.7.1.2 --- A.6.2.2 4.(1) A.6.1.6 A.6.1.7 A.6.1.7 --- A.10.9.2 --- A.8.3.1 A.10.10.3 ---- A.12.6.1

1080 6 1 215 5 1 131 5 1 64 4 1 48 4 1 40 4 1 35 3 1 26 3 1 22 3 1 18 3 1 18 3 1 17 2 1 15 2 1 14 2 1 11 2 1 11 2 1 11 2 1 8 2 Relative Total 1882 8 2 Absolute Total 1870* 7 2 h ttp://www.iso27001certificates.com (Absolute Total) (Relative Total) m u lti-nation registrations d ual registration ISMS International User Group 2002-2004 Copyright JIPDEC ISMS, 2005 30