20210326 cybozu.com セキュリティチェックシート

1 2022 10 21 1 1 CISO Chief information security Officer ISMS ISMS CISO ISMS 2 1 1 ISMS ISMS ISMS CISO CISO 2 ISMS CISO CSIRT CSIRT ISMS PDCA ISO/IEC27001:2013 JIS Q 27001:2014 IS577142 < > 2020 7 9 5 BSI ISO/IEC 27001:2013 ISMS ISMS ISO/IEC 27017.

2 2015 CLOUD 715091 < > Garoon kintone Office Mailwise ISMS 2020 7 9 5 BSI kintone Garoon ISMAP C21-0016-2 2013 1/7 4 (SLO) (SLO) 10:00 12:00 13:00 17.

3 30 1 1 CISO ISMS 1 3 ISMS PDCA 1 2 - - - 3 1 - - - PC 4 1 2 5 1 ( ) 2 - - - 3 1981 6 ISMS ( )

4 SLA 2/7 4 JIS PDU PDF SPD(surge protective device) 5 FISC JDCC 4 6 6 1 OS ( ) Web (JPCERT )

5 5 6 1 / JavaScript JavaScript 2 14 #infrastructure OS

6 3/7 9 2 12 13 14 NTP 15 VPN 16 17 18 BASIC ( ) IP ( )

7 #unauthorized_access_prevention20 ID 22 23 24 ID 4/7 25 24 >

8 27 VPN 28 29 #unauthorized_access_prevention30 30 2 30 31 7 1 15.

9 26. 8 1 2 CSIRT ISMS CISO CSIRT ISMS CSIRT

10 ( ) 5/7 3 CSIRT (JPCERT) Web > 1 2 3 4 5 10 1 ISMS ( ) ISMS ISMS 2 27.