CISO 等セキュリティ推進者の 経営・ ¦業に関する …

1 2018 3 28 CISO ii iii 1.. 1 .. 1 .. 1 2. CISO .. 3 .. 3 .. 4 CISO .. 10 CISO .. 25 3. CISO .. 31 .. 31 .. 32 .. 33 4.. 42 .. 42 .. 44 .. 47 5.. 54 .. 54 .. 56 6.. 58 .. 58 IT .. 59 .. 60 CISO .. 61 CISO .. 64 CISO .. 65 CISO .. 67 CISO .. 68 CISO .. 70 CISO .. 71 .. 72 iv 1 1. IT IT IT NISC CISO CISO

2 CISO 1 CISO CISO CISO CISO CISO 1 IPA CISO CSIRT 2017 p34-p35 2 1. 2 CISO 2. 3 CISO 3. 4 CISO 4. CISO 3 2. CISO CISO CISO 2 CISO CISO CISO A3 1 NISC 2 IPA Ver.

3 3 Deloitte, The new CISO - Leading the strategic security organization 2016 4 Info-communications Development Authority of Singapore, National Infocomm Competency Framework NICF, NICF Overview Map, Horizontals, Infocomm Security, Security Management, Chief Information Security Officer, Job Role & Competencies 2009, 2011 5 NIST SP800-181, National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework 6 Bill Bonney , CISO Desk Reference Guide: A Practical Guide for CISOs 2016 7 IT Capability Maturity Framework(IT-CMF) 2015 8 2 CISO CISO 4 SANS, Mixing Technology and Business.

4 The Roles and Responsibilities of the Chief Information Security Officer 2003 9 CISO EC-Council CISO Program, Certified CISO Body of Knowledge 10 Heinz CISO 11 (1) CISO CISO CISO CISO IT IPA 3 CISO CISO CISO 4 IDA Info-communications Development Authority of Singapore 4 CISO IT

5 IT CISO 3 IPA CISO CSIRT 2017 4 IDA 2016 10 1 MDA Media Development Authority IMDA Infocomm Media Development Authority 5 (2) CISO CISO CISO IPA 11 CISO CISO / 1 CISO/CRO/CIO 12 3 CISO 10 10 5 CISO 18 6 7 8 7 9 CISO 7 7 10 CISO 5 11 CISO

6 14 4 CISO 6 CISO CSIRT SOC CISO CISO 7 CISO 1 3 5 6 ICT DR ICT UI IT IT IT SPP PDCA TEA ICT ICT IT RSK

7 EXL LGA CSIRT IT MGT / PMA 8 CISO 8 9 10 11 Security Strategy & Innovation Digital Transformation: Security Implications Enterprise Security Governance & Planning Security Financial Management Effective Communication Strategies Cyber Risk Management External Dependency Management Cyber Law & Compliance

8 IT Security Metrics & Operational Resilience Security Structure & Operations Threat & Incident Response Managing Operational Threat Building an Insider Threat Program A Realistic View of Security Technology 9 (3) CISO CISO 1) 7 NISC 1-2 5 IPA CISO CISO 2)

9 10 CISO IPA CISO CISO CISO 5 P12 10 CISO CISO CISO 3) CISO CISO CISO CISO CISO CISO CISO 10 CISO CISO CISO CISO CISO CISO CISO 6 A3

10 1-1 1-2 2015 6 2016 6 CISO 6 ( ) 7 ( ) 8 ( ) 11