運用サービスに関わる法制化 ... - cac.co.jp

1 SOX .. SOX ITILR .. AMO .. ITIL . ISO20000 2005 12 . ISO27001 2005 10 .. 1 IT IT .. SOX . 2006 IT . cobit 2005 IT .. ISO10006/PRINCE2 /PMBOK PM .. ISO19011 . ISO9001 QMS . cobit IT .. IT. IT. IT. IT.. ISO/IEC12207 SLCP . ISO2000 ITSM . ISO15504 SPA . ITIL .. ISO19770 . CMM/CMMI . ISO27001/ISMS/BS7799 . ISOxxx/PAS56 /NFPA1600 BCP . SOX. COSO . IT . ITC .. 1 IT . 26 SOFTECHS. 2005 2 cobit . Executive Summary Framework . control Objectives Management Guidelines 4 . SOX 1 .. Management Guidelines . cobit IT IT. Control Objectives for Information and related Tech- Control Objectives for Sarbanes-Oxley . nology IT . cobit 3. IT . ISACA Information System Audit and Control Associa- . tion IT ITGI IT 4 4 34 IT . Governance Institute 318 . Executive Summary .. Framework cobit .. cobit . Control Objectives Integrated Book cobit .

2 Management Guidelines . 2006 .. Audit Guidelines IT Assurance Guide Using cobit .. IT . Implementation Tool Set .. IT Governance Implementation Guide .. cobit ONLINE . ISACA HP . 2 3 cobit . ME PO . ME1 IT PO1 IT . ME2 PO2 . ME3 PO3 . ME4 IT PO4 IT .. PO5 IT . PO6 . PO7 IT . PO8 . PO9 IT . PO10 .. DS AI . DS1 AI1 . DS2 AI2 . DS3 . DS4 AI3 . DS5 AI4 . DS6 AI5 IT . DS7 AI6 . DS8 AI7 . DS9 . DS10 . DS11 . DS12 . DS13 .. 4 cobit 4 34 . 27. IT . ITIL IT Infrastructure Library . cobit BS15000 . ISO20000 . ITIL IT . IT . ITIL ISO17799 IT.. 8 . 2006 5 .. IT . ITIL ISO20000 6 ITIL . IT 5 10 .. BS15000 . 7 ISO20000 . 2005/12 .. IT . ISO20000 BS15000-1.. ITIL . ISO20000-1 .. IT IT .. BS15000-2.. ISO20000-2 .. ITIL .. DISC PD0005 . ISO20000 .. ITIL.. ISO20000 .. ITIL. ITIL .. 5 .. BS British Standard ISMS/ISO27001.

3 DISC Delivering Information Solutions to Customers PD Published Document . 5 IT .. IT .. IT . IT . IT . Planning to Implement Service Management .. Service Support ICT. Infrastructure Management The Technology The Business The Business .. Perspective .. Service Delivery Security Management . IT Applications Management . IT IT . Software Asset Management .. IT .. IT . 6 ITIL . ITIL SOFTECHS , . 28 SOFTECHS. ISO20000 ITIL.. 1.. 2.. 3.. 4.. 5.. 6.. IT . IT IT .. 7.. 8.. 9.. 10.. 7 ISO20000 ITIL.. ISO/IEC 27000 BS7799-2 ISO27001 ISMS 0 0 . ISO/IEC 27001 2005/10 . ISMS 1 1 .. 2 2 . ISO/IEC 27002 2007/4 BS7799-1 3 3 . 4 4 . ISO/IEC 27003 .. ISO/IEC17799 . 5 5 . ISO/IEC 27004 6 ISMS . 7 ISMS 6 . ISO/IEC 27001 8 ISMS 7 .. A . 2006/5 ISO/IEC27001 . B . 8 ISMS OECD . 0 . C .. ISO 9001 2000 ISO 14001 2004.

4 ISO27000 2006 5 9 ISO27001 ISMS . ISO27001 . ISO27000 ISO27001 ISMS 3.. ISO27001 4.. ISO27002 5.. 6.. ISO27003 7.. 8.. ISO27004 . 9.. ISO27005 10.. ISO27000 8 BS7799 11.. 12.. BS7799-2 ISMS 10 . ISMS.. BS7799-1 . ISO17799 ISO27000 9 10 ISMS ISO27001 .. 29. COSO . cobit . PO IT . PO1 IT . PO2 . PO3 . PO4 IT . PO5 IT . PO6 . PO7 . PO8 . PO9 . PO10 . PO11 . AI . AI1 . AI2 . AI3 . AI4 . AI5 .. AI6 . DS . DS1 . DS2 . DS3 . DS4 . DS5 . DS6 . DS7 . DS8 . DS9 . DS10 . DS11 . DS12 . DS13 . M . IT . M1 . M2 . M3 . M4 . IT . 11 cobit COSO .. SOX cobit ITIL COSO . ISO27001 COSO. IT .. cobit . cobit for SOX ISMS/ISO2700x cobit . IT . 11 2004 4 cobit ITGI. ITIL. ITIL. IT . IT cobit for SOX . COSO cobit . 12 IT . SOX COSO cobit . ITGI ITIL OGC Office of Government Commerce Aligning cobit , ITIL and ISO17799 for Business Benefit.

5 SOX ITIL ISO27002 SOX cobit . IT ITIL 12 SOX . cobit ITIL cobit ITIL ISO2700x . ISO2700x ISO17799 ISMS ISO17799 ISMS . 13 . 30 SOFTECHS. PCAOB IT .. cobit .. 1 AI2 . 2 AI3 .. 3 AI4 .. 4 AI5 . 5 AI6 . 6 DS1 .. 7 DS2 . 8 DS5 . 9 DS9 . 10 DS10 . 11 DS11 . 12 DS13 . IT . 13 . SOX IT . cobit ITIL ISO27001 . AI2 . ICT . AI3 . AI4 .. AI5 .. AI6 .. DS9 . DS10 . DS1 . DS13 . DS5 .. DS11 . DS2 .. 14 SOX ITIL ISO27001 . PD0005 Manager's Guide . IT IT PD0015 Self-assessment ISO13335 Management Guideline . workbook ISO27003 Implementation Guideline . ISO27004 Metrics&Measurement . cobit ITIL. ISO27005 Risk Management .. 12 SOX BS15000-2 / ISO20000-2 BS7799-1 / ISO17799 ISO27002. Code of Practice Code of Practice . IT ITIL ISO27001 BS15000-1 / ISO20000-1 BS7799-2 / ISMS ISO27001. Specification Specification / Requirement.

6 14 A ISO 9001 2000. C P. D. ITIL . ISO27001 ISO9000 . PDCA .. ISO27001 15 . ISO27002 2006 5 . JIS Q 27002 ISO27001 2 . ITIL ISO27002 . ISO20000 ISO27000 ISO14000 .. 15 . ISO9001 PDCA . ISO20000 ISO27001 ISO20000 . SOX ITIL ISO27002 ITIL . ISO27001 BS7799 . ISO20000 . 31.. 1 . ISO CAC .. ISO .. SOX ISO20000 ISO27001 .. ISO IT 1. IT IT . SOX 2005 . 2.. 2005 . 3. cobit 3 IT . 2003 . SOX 14 4. cobit IT Governance Institute 2005 . 5.. IT IT 2004 . 6. Aligning cobit , ITIL and ISO17799 for Business Benefit IT Governance Institute . IT 7. TSO The Stationary Office . COSO cobit ITIL 2003 . 8. TSO The Stationary Office . 2004 . SOX . ITILR Office of Government Commerce OGC . cobit cobit Information Systems Audit and Control Foundation, . IT IT Governance Institute trademark COBITR . IT . Copyright TM R.

7 32 SOFTECHS.