$B%j%9%/%^%M%8%a%s%HO@(B

$B$B$[$+$N?M$NLBOG$K$J$i$J$$8B$j2?$r$7$F$b9=$o$J$$(B $B$H$$$&$N$,!$@>B

$B@>B<$O!$$B%a!<%k(B $B$r

$B

$B;2>H@h$NJ}!9$K!'(B $BMxMQ$5$;$F$$$?$@$-$"$j$,$H$&$4$6$$$^$9!%3'$G;w$?$h$&$J65:`$r:n$i$:8_$$$KMxMQ$7$h$&$H$$$&$N$,!$65:`$K$D$$$F$N@>B<$N%]%j%7!<$G$9!%@>B<$O!$(BWikipedia $B$K=q$/$3$H$J$I$G9W8%$7$F$$$k$D$b$j$G$9!%@>B<$,:n$C$?65:`$GLr$K$?$D$b$N$,$"$l$P!$$4<+M3$K%j%s%/$J$5$C$F$/$@$5$$!%(B

$B"-(B$BJL%Z!<%8$,3+$/!%(B$B%*%s%i%$%sI42J;vE5(B Wikipedia $B$N;2>H$,B?$$!%(B

$B

$BGX7J?'$,Gr!?OH$,NP?'(B $B$NItJ,$,!$@>B<$N$B$B!J3F%j%s%/@h$rFI$s$GI|=,$9$k$3$H$r4+$a$^$9!%7g@J$7$?>l9g$K$b!$%j%s%/@h$rFI$a$PJd$($k$G$7$g$&!%!K(B

0. $B%,%$%@%s%9(B

0.1 $B@>B<$N<+8J>R2p(B, $B$3$N(B Web $B%Z!<%8$X$N(B$B$?$I$jCe$-J}(B [5 $BJ,(B] 19:40$B!A(B19:45

0.2 $B;vNc$HBP:v!'(B $B4JC1!*$d$5$7$$%;%-%e%j%F%#65<<(B $B!J(B$B;00f=;M'6d9T(B$B!K(B

• $B8D?M>pJsO31L;v7o!&;v8N0lMw(B
• $B8D?M%G!<%?N.=P;v7o(B$B!J;0I)#U#F#J>Z7t!K(B
• DDoS $B967b(B$B!J4ZJF$KHo32!K(B $B"*(B $BBP:v(B, +
• $B8D?M%G!<%?EpFq;v7o(B$B!J;0I)EE5!!K(B
• $B?{D>?M $B$N(B $B$J$j$9$^$7%D%$%C%?!<(B

0.3 $B3F

• $B@h?J4k6H$+$i3X$V;v6H%j%9%/%^%M%8%a%s%H(B $B.pdf - $B7P:Q;:6H>J(B
  
• IT $B%7%9%F%`$N$?$a$N%j%9%/%^%M%8%a%s%H%,%$%I(B.pdf - $B%"%a%j%+9qN)I8=`5;=Q8&5f=j(B
  
• $B%j%9%/!&%^%M%8%a%s%H%,%$%I%V%C%/(B - $BA49q8xN)J82=;\@_6(2q(B
  
• $B!H(B$B%j%9%/%$%s%F%j%8%'%s%9(B$B!I(B- Deloitte $B%H!<%^%D(B
  

0.4 $B

$B8N>>2<9,G7=u!V?4G[$7$F!$?4G[$7$F!$0B?4$7$m!W(B

$B>pJs%;%-%e%j%F%#(B A/B $B$+$i(B$B!J@aHV9f$b7Q>5!K(B
1. $B>pJs(B

1.1 $BG'<1$NJQ2=!'(B $B7P1D$NBP>]!a?M!&J*!&6b!&(B$B>pJs(B

1.3 $B>pJs$N;q;:2ACM(B, $B;q;:2ACM$NI>2A(B$B!JNc!K(B

$B;vNc!'(B $BI>2A%5!<%S%9(B

2. $B%j%9%/$H>pJs%;%-%e%j%F%#(B [30 $BJ,(B] 19:45$B!A(B20:15

2.0 $B%j%9%/(B

$B8l8;!'(B risk
$BDj5A!'(B $B%j%9%/(B, Risk$B!J1Q8lHG(B Wikipedia$B!K(B

2.1 $B>pJs%;%-%e%j%F%#(B

$BDj5A!'(B $B>pJs%;%-%e%j%F%#(B $B!!!J(B$B>.%F%9%H#1(B$B!K(B
$BMQ8l(B$B!'(B $B%j%9%/(B, $B@H, $B6<0R(B (+), $B%$%s%7%G%s%H(B, $BBP:v(B, $B0lMw(B
$B=;Bp$NNc!'(B $B2P:R(B, $B2DG3J*
$B>pJs$NNc!'(B $BO31L(B, $B;}$A1?$V(B, $BCV$-K:$l(B, $B@hF|$NO31LL$?k(B, $B6XBS=P!J0E9f2=!K(B
$B6<0R!'(B $B:R32!$>c32!((B $BIT@5;HMQ!$(BDDoS$B967b(B$B!J(B$B%5%$%P!<%F%m(B$B!K(B

2.4 $B%j%9%/4IM}(B$B!'(B $B%j%9%/J,@O(B $B"*(B $B%j%9%/%"%;%9%a%s%H(B + ++

$BBP1~J}?K!'(B $B2sHr!$(B$B0\E>(B$B!JE>2G!K(B$B!$(B$B7Z8:(B$B!J:GE,2=!K(B$B!$(B$BJ]M-(B$B!J, + ++

2.5 KT $BK!(B$B$K$h$kLdBj2r7h(B - $B%j%9%/$NA[Dj(B

2.6 $BNr;K(B$B!'(B $B@H +

4. $BAH?%$N

$B!P(B $BBh(B 5, 7 $B2sJ,$NBe9VMQ;qNA(B $B!Q(B

4.3 $B4k6H$N

• $BIY;NDL(B - $B%j%9%/%^%M%8%a%s%H(B
• $B%+%4%a(B - $B0B?4!&0BA4(B
• $B%Q%J%=%K%C%/(B $B6`9p(B
  $B9TF04p=`(B
  $B7P:Q;:6H>J(B $B6[5^L?Na(B.pdf
  CM
  
• $B9qL1@83h%;%s%?!<(B

4.4 $B9q:]5,3J(B +$B!'(B ISO/IEC 27000 $B%7%j!<%:(B, PDCA$B%5%$%/%k(B

$B>pJs%;%-%e%j%F%#%^%M%8%a%s%H%7%9%F%`(B (ISMS)
$B9q:]5,3J$N@oN,E*$JMxMQ(B.pdf, EU$B$N9q:]5,3J2=@oN,(B +

7. $B>pJs%;%-%e%j%F%#%^%M%8%a%s%H%7%9%F%`(B (ISMS) + (++) [20 $BJ,(B] 20:15$B!A(B9:35

(1) ISO/IEC 27001 "ISMS - Requirements"

(2) ISO/IEC 27002 "Code of practice for information security management"

$BF|K\9)6H5,3J(B $B"-(B

(1') JIS Q 27001$B!H(BISMS $B!=(B $BMW5a;v9`!I(B$B!J5l!'(BISMS$BG'>Z4p=`!K(B

(2') JIS Q 27002$B!H>pJs%;%-%e%j%F%#%^%M%8%a%s%H$N$B!J5l(B JIS X 5080$B!K(B

$BF|K\9)6H5,3J!?4IM}%7%9%F%`(B $B$N0lMw(B $B%;%-%e%j%F%#5;=Q(B $B$N0lMw(B

7.1 JIS Q 2001:2001$B!H%j%9%/%^%M%8%a%s%H%7%9%F%`9=C[$N$?$a$N;X?K!I(B

8. $BFbItE}@)$H%3!<%]%l!<%H%,%P%J%s%9(B

8.1 $BGX7J!'(B $B%3%s%W%i%$%"%s%9(B (comply) +, SOX$BK!(B, $BF|K\HG(BSOX$BK!(B

$BFbItE}@)(B, $B%3!<%]%l!<%H!&%,%P%J%s%9(B (govern)
$B>pJs%;%-%e%j%F%#%,%P%J%s%9(B
$B;qNA!'(B [8. $B%N!<%H(B]$B!J(B$BC4J](B$B!K(B

$B%j%9%/%^%M%8%a%s%H$HFbIt4F::(B

$B7P1D2J3X35O@(B $B$+$i(B
10. $BH4

10.1 $B@8;:CHq

$B!!(B		$BH=!!!!!!Dj(B
		$B9g3J(B	$BIT9g3J(B
$B@=(B $BIJ(B	$BNIIJ(B	$B!{(B	$B@8;:$B!JBh#1
	$BITNIIJ(B	$B>CHq$B!JBh#2	$B!{(B

2 $B$B%j%9%/(B$B!J4m81!K$,$"$k!%(B

10.2 $BJ]81$O%_%K%^%C%/%9@oN,(B(?) [10 $BJ,(B] 20:35$B!A(B20:45

$BJ?6QE*$K!J4|BTCM$H$7$F$O!KB;$r$9$k$3$H$,3N

$BJ]81(B$B$N2CF~(B $B$H(B $B;v8N$NH/@8(B$B!!!JC10L!'K|1_!K(B

$BB;323[(B		$B;v!!!!8N(B		$BB;!!!!32(B
		$BH/@8(B	$BHsH/@8(B	$B:GBgCM(B	$B4|BTCM(B
$BJ](B $B81(B	$B2CF~(B	* 1002	2	1002	2.1
	$BHs2CF~(B	3000	0	3000	0.3
$B@85/3NN((B		0.0001	0.9999	0.0001	$B!=(B

* 3000 $BK|1_$NB;<:$,H/@8$7$?$,!$(B2000 $BK|1_$NJ]816b$,;YJ'$o$l$?$N$G!$

$B

$B:GBgCM$N$&$A:G>.$N$b$N$rA*$V(B $B!a(B min (max ($BB;32(B)) $B!a(B $B%_%K%^%C%/%9@oN,(B
$B$?$@$7!$%2!<%`M}O@$NOHAH$_$G$O!$Aj

$B%P%C%/%"%C%W%U%!%$%k$NJ]B8(B $B$H(B $B;v8N$NH/@8(B

$BB;32(B		$B%G%#%9%/%/%i%C%7%e(B
		$B2u$l$k(B	$B2u$l$J$$(B
$B%P%C%/(B $B%"%C%W(B $B%U%!%$%k(B	$BJ]B8(B	$B2sI|2DG=(B	$B:n6H;~4V(B $B!J(B10$BIC!_2s?t!K(B
	$BHsJ]B8(B	$B%U%!%$%kJ6<:(B	$BLdBj$J$7(B

$B%P%C%/%"%C%W$r$B%^!<%U%#!<$NK!B'(B$B$NN`(B

3. $B4m5!4IM}(B [20 $BJ,(B] 20:45$B!A(B21:05

$B%j%9%/%^%M%8%a%s%H$H4m5!4IM}$H$N0c$$(B $B!J(B$BJq4^4X78(B$B!K(B

3.0 $BB.Js$N=EMW@-!J>pJs$N2DMQ@-$H40A4@-!K(B

$B:R32!'(B $BKL3$F;Fn@>2-CO?L(B$B!$(B $B:e?@!&C8O)Bg?L:R(B (1.17)
$B%F%m!'(B $B%"%a%j%+F1;~B?H/%F%m;v7o(B (2001$BG/(B 9.11)
$BBP1~!'(B $BJF(B $B9qEZ0BA4J]>c>J(B$B!$(B $BFb3U0BA4J]>c<<(B$B!J(B$BFbD4(B$B!K(B

3.1 $B4m5!4IM}(B$B!'(B $BM=KI(B $B"*(B $BGD0.(B $B"*(B $BI>2A(B $B"*(B $B8!F$(B $B"*(B $BH/F0(B $B"*(B $B:FI>2A(B

9.11 $B$G$N4m5!4IM}(B$B!J(B$BDL?.ES@d(B +$B!K(B, $B%X%j%3%W%?!<$NMxMQ(B +
$B4m5!H/@8;~$K!$AH?%E*$J9TF0$r $B!!(B(1)$BM-8z$J;X4xE}@)(B (2)$B0[$J$C$?AH?%4V$NO"F0BN@)(B + (3)$BL@3N$J9TF0;X?K(B

$BKI:RMQ%7%c%Y%k(B 10 $BK\$O!$7YHw<l$N1|$K$"$k!H(B$BKI:R(B$B!I$H=q$+$l$?AR8K$K$"$j$^$9!%(B

6.3 $B;v6H7QB37W2h(B (BCP)

3.2 $B>.%F%9%H#2(B

---

$B>pJs%;%-%e%j%F%#(B A/B

$B7P1D2J3X35O@(B

---

	$B$R$H$DLa$k(B
	$B@>B

NISHIMURA, Kazuo$B!!(Bnishimura@komazawa-u.ac.jp