1. ITã»ãã¥ãªãã£ã¢ããªã¹ããšã¯ã»æŠå¿µè§£èª¬
ITã»ãã¥ãªãã£ã¢ããªã¹ãã«ã€ããŠæ·±ãç解ããããã«ããŸãã¯ãã®å®çŸ©ã圹å²ãšè²¬ä»»ãä»ã®ITè·çš®ãšã®éãããããŠITã»ãã¥ãªãã£ã¢ããªã¹ãã«æ±ããããéèŠãªãã€ã³ãã»ããã«ã€ããŠè§£èª¬ããŠãããŸãããã
1.1 ITã»ãã¥ãªãã£ã¢ããªã¹ãã®å®çŸ©
ITã»ãã¥ãªãã£ã¢ããªã¹ããšã¯ãçµç¹ã®æ å ±ã·ã¹ãã ããããã¯ãŒã¯ã®ã»ãã¥ãªãã£ãç£èŠãè©äŸ¡ããé©åãªé²åŸ¡æ段ãèšèšã»å®è£ ããå°é家ã®ããšãæããŸãã
圌ãã¯çµç¹ãé©åãªã»ãã¥ãªãã£ããªã·ãŒã確ç«ã»ç¶æããããã®æŠç¥çãªåœ¹å²ãæãããã»ãã¥ãªãã£è åšãè©äŸ¡ãã察çãç«æ¡ããŸãã
ãŸããçºçããã»ãã¥ãªãã£ã€ã³ã·ãã³ãã«å¯Ÿå¿ãããã®åå ãææ¡ããåçºé²æ¢çãçå®ããä»»åãæ åœããŸãã
1.2 ITã»ãã¥ãªãã£ã¢ããªã¹ãã®åœ¹å²ãšè²¬ä»»
ITã»ãã¥ãªãã£ã¢ããªã¹ãã®äž»ãªåœ¹å²ãšããŠãçµç¹å ã®æ å ±ã»ãã¥ãªãã£äœå¶ã®éçšãšç¶ç¶çãªæ¹åãæããããŸããããã«ã¯ãã»ãã¥ãªãã£ã®ããã®ã¬ã€ãã©ã€ã³ãããªã·ãŒã®çå®ãã·ã¹ãã ã®ã»ãã¥ãªãã£èšºæãåŸæ¥å¡ã®ã»ãã¥ãªãã£æè²ãå«ãŸããŸãã
ããã«ãææ°ã®ã»ãã¥ãªãã£è åšãæ»æææ³ãæ°ãã«çºèŠãããã»ãã¥ãªãã£äžã®è匱æ§ã«ã€ããŠåžžã«æ å ±ãåéããå¿ èŠã«å¿ããŠçµç¹å šäœã®ã»ãã¥ãªãã£é²åŸ¡æŠç¥ã®èŠçŽããè¡ã責任ããããŸãã
ãããŠäœãããéèŠãªã®ããçºçããã»ãã¥ãªãã£ã€ã³ã·ãã³ããžã®å¯Ÿå¿ãšããã®åŸã®ãªã¹ã¯åæãšåçºé²æ¢çã®ç«æ¡ã§ãã
1.3 ITã»ãã¥ãªãã£ã¢ããªã¹ããšä»ã®ITè·çš®ãšã®éã
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãäž»ã«çµç¹ã®æ å ±ã»ãã¥ãªãã£ã«é¢ããè·çš®ã§ããç¹ã§ããœãããŠã§ã¢ãšã³ãžãã¢ãã·ã¹ãã ãšã³ãžãã¢ãªã©ä»ã®ITè·çš®ãšã¯äžç·ãç»ããŸãã
圌ãã®å°éæ§ã¯ãã·ã¹ãã ããããã¯ãŒã¯ãæ»æããå®ããæ©å¯æ å ±ãä¿è·ããããã®å ·äœçãªç¥èãšã¹ãã«ã«ãããŸãã
ãã®ãããITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãä»ã®ITè·çš®ãšã¯ç°ãªããç¹åããæè²ãšç ä¿®ããŸãç¹å®ã®èªå®è³æ Œãå¿ èŠãšãªãããšãå€ãã§ãã
1.4 ITã»ãã¥ãªãã£ã¢ããªã¹ãã«æ±ãããããã€ã³ãã»ãã
ITã»ãã¥ãªãã£ã¢ããªã¹ããæåããããã«ã¯ãæè¡çãªã¹ãã«ã ãã§ãªããäžå®ã®ãã€ã³ãã»ãããå¿ èŠãšãããŸãã
ãã®äžã€ã¯ãåŠç¿æ欲ã§ããã»ãã¥ãªãã£ã¯æ¥ã é²åããåéã§ãããææ°ã®è åšã«å¯Ÿå¿ããããã«ã¯åžžã«åŠã³ç¶ããããšãæ±ããããŸãã
次ã«ãåé¡è§£æ±ºã¹ãã«ãéèŠã§ããè€éãªã»ãã¥ãªãã£åé¡ã解決ããããã«ã¯ãè«ççæèåãšåµé æ§ãå¿ èŠãšãªããŸãã
2. ITã»ãã¥ãªãã£ã¢ããªã¹ãã®å ·äœçãªæ¥åå 容
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯æ å ±ã»ãã¥ãªãã£ã«é¢ããå°éç¥èãé§äœ¿ããäŒæ¥ã®æ å ±è³ç£ãä¿è·ããäžæ žçãªåœ¹å²ãæ ã£ãŠããŸããå ·äœçãªæ¥åå 容ã次ã«è©³ããè¿°ã¹ãŸãã
2.1 ã»ãã¥ãªãã£ãªã¹ã¯ã®è©äŸ¡ãšç®¡ç
ã»ãã¥ãªãã£ãªã¹ã¯ã®è©äŸ¡ãšç®¡çã¯ãITã»ãã¥ãªãã£ã¢ããªã¹ãã®éèŠãªæ¥åã®äžã€ã§ããããã¯ãäŒæ¥ã®ITã€ã³ãã©ãã·ã¹ãã ã«é¢ããè åšãäŸµå ¥ã®å¯èœæ§ãæŽå¯ããè©äŸ¡ããèœåãå«ã¿ãŸãã
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãæœåšçãªãªã¹ã¯ãè©äŸ¡ãããããã«å¯Ÿå¿ããããã®å¯ŸçãéçºããŸããããã«ã¯ãæ°ããªã»ãã¥ãªãã£è åšã®æ€ç¥ãè匱æ§ã®è©äŸ¡ããããã®ãªã¹ã¯ã管çã»è»œæžããããã®æŠç¥ã®çå®ãªã©ãå«ãŸããŸãã
ãã®ãããã»ãã¥ãªãã£ãªã¹ã¯ãé©åã«è©äŸ¡ã»ç®¡çããããã«ã¯ãæ å ±ã»ãã¥ãªãã£ã«å¯Ÿããæ·±ãç¥èãšç解ã ãã§ãªããé«åºŠãªã¢ããªãã£ã¯ã¹ã¹ãã«ãšåé¡è§£æ±ºèœåãå¿ èŠã§ãã
2.2 ã»ãã¥ãªãã£ããªã·ãŒãã³ã³ãã©ã€ã¢ã³ã¹ã®ç¢ºèªã»ç¶æ
ITã»ãã¥ãªãã£ã¢ããªã¹ãã®æ¥åã®äžéšãšããŠãäŒæ¥å ã®ã»ãã¥ãªãã£ããªã·ãŒãã³ã³ãã©ã€ã¢ã³ã¹ã®ç¢ºèªã»ç¶æããããŸããäŒæ¥ã¯ãæ³çãªèŠä»¶ãæ¥çåºæºãæºããããã«ãå³æ Œãªã»ãã¥ãªãã£ããªã·ãŒãèšå®ã»ç®¡çããå¿ èŠããããŸãã
ã¢ããªã¹ãã¯ãã®ããªã·ãŒãé©åã«å®æœãããŠããããç£èŠããå¿ èŠã«å¿ããŠæŽæ°ã»æ¹è¯ããŸããåæã«ãæ³åŸãèŠå¶ã«æºæ ããŠãããå®æçã«ç¢ºèªããäŒæ¥ã®æ å ±ã»ãã¥ãªãã£ãããžã¡ã³ãã·ã¹ãã ïŒISMSïŒãé©åãªç¶æ ãç¶æããŠããããšãä¿èšŒããŸãã
ãããã®ã¿ã¹ã¯ã¯ãäŒæ¥ãæ³ç責任ãæããã€ã€ãæ å ±è³ç£ãä¿è·ããããã«å¿ èŠãªæŽ»åã§ãããITã»ãã¥ãªãã£ã¢ããªã¹ãã®æ¥åç¯å²ã«å«ãŸããŠããŸãã
2.3 ã€ã³ã·ãã³ã察å¿ãšãªã«ããªèšç»ã®ç«æ¡ã»å®è¡
ITã»ãã¥ãªãã£ã¢ããªã¹ãã«ã¯ãã»ãã¥ãªãã£ã€ã³ã·ãã³ããçºçããéã®å¯Ÿå¿ãšãªã«ããªèšç»ã®ç«æ¡ã»å®è¡ãšãã£ã圹å²ãæ±ããããŸããå ·äœçã«ã¯ãã»ãã¥ãªãã£äŸµå®³ã®çºçæã«è¿ éãã€å¹æçã«å¯Ÿå¿ããããã®æé ãããžãã¹ç¶ç¶èšç»ïŒBCPïŒãšããŠæºåã»ä¿å®ããããšãæ±ããããŸãã
ãŸããåé¡ãçºçããå Žåã«ã¯ããã®åå ãç¹å®ããåçºé²æ¢çãç«ãŠããšãšãã«ã圱é¿ãåããã·ã¹ãã ã®åŸ©æ§ãè¡ããŸãããããã®ããã»ã¹ãéããŠãäŒæ¥å šäœã®ã»ãã¥ãªãã£ã確ä¿ããŸãã
ãããã£ãŠãITã»ãã¥ãªãã£ã¢ããªã¹ãã¯æ¥åç¶ç¶ç®¡çïŒBCMïŒããŠããŠãæããã¯ã©ã€ã·ã¹ç®¡çã®ã¹ãã«ãæã€ããšãéèŠã§ãã
2.4 ã·ã¹ãã ããããã¯ãŒã¯ã®ã»ãã¥ãªãã£ç£èŠãšæŽæ°
ãŸããITã»ãã¥ãªãã£ã¢ããªã¹ãã®éèŠãªåœ¹å²ãšããŠã·ã¹ãã ããããã¯ãŒã¯ã®ã»ãã¥ãªãã£ç£èŠãšæŽæ°ããããŸããäŒæ¥ã®ITã»ãã¥ãªãã£ã確ä¿ããããã«ã¯ã絶ããã·ã¹ãã ãšãããã¯ãŒã¯ã®ç¶æ ãææ¡ããææ°ã®ã»ãã¥ãªãã£æŽæ°ãé©çšããŠè åšã«å¯Ÿæããããšãäžå¯æ¬ ã§ãã
ã¢ããªã¹ãã¯ãã»ãã¥ãªãã£ãã¬ãŒãã®äºå ããã£ããã§ãããããã·ã¹ãã ã®ç£èŠãšè åšã®æ€åºã«å ããå¿ èŠã«å¿ããŠã·ã¹ãã ã®æŽæ°ãããã管çãè¡ããŸãããã®ãããã·ã¹ãã ã®èšå®ãã¢ããããŒã管çã®ã¹ãã«ãæ±ããããŸãã
以äžããITã»ãã¥ãªãã£ã¢ããªã¹ãã®äž»ãªæ¥åå 容ã§ããäŒæ¥ã®æ å ±ã»ãã¥ãªãã£ãå®ãããã«ã¯ããããã®æ¥åã«å ããæ°ããªã»ãã¥ãªãã£è åšã«å¯Ÿå¿ããããã®ç¶ç¶çãªã¹ãã«ã¢ãããšç¥èæŽæ°ãæ±ããããŸãã
3. ITã»ãã¥ãªãã£ã¢ããªã¹ããå¿ èŠãšããæè¡çãªã¹ãã«
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãäŒæ¥ã®æ å ±ã·ã¹ãã ãä¿è·ããããã«äžå¯æ¬ ãªåœ¹å²ãæãããŸãããã®å°é家ãå¿ èŠãšããäž»èŠãªæè¡çã¹ãã«ãããã€ãèŠãŠã¿ãŸãããã
3.1 ã»ãã¥ãªãã£æè¡ãšããŒã«ã®ç¥è
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãäžæµã®ç¥èãšã»ãã¥ãªãã£ããŒã«ãžã®ç解ãå¿ èŠã§ããããã«ã¯ãäŸµå ¥æ€ç¥ã·ã¹ãã (IDS)ãäŸµå ¥é²æ¢ã·ã¹ãã (IPS)ãããŒã¿æ倱é²æ¢ (DLP)ãã¢ã³ããŠã€ã«ã¹ãœãããŠã§ã¢ããã¡ã€ã¢ãŠã©ãŒã«ãªã©ãåºç¯å²ã®ãœãªã¥ãŒã·ã§ã³ãå«ãŸããŸãã
ããããã®ã·ã¹ãã ãããŒã«ãã ã©ããªè åšã«å¯ŸåŠããã®ããã©ã®ããã«æ©èœããã®ããã©ã®ããã«å®è£ ãšç®¡çãè¡ãã®ãã«ã€ããŠã®æ·±ãç解ãæ±ããããŸãã
ãããã®ç¥èãæã€ããšã§ãã¢ããªã¹ãã¯çµç¹ãçŽé¢ããå¯èœæ§ã®ããã»ãã¥ãªãã£ãªã¹ã¯ãè©äŸ¡ããããã«å¯Ÿãã察çãææ¡ã§ããŸãã
3.2 ãããã¯ãŒã¯ãšã·ã¹ãã ã®æ·±ãç解
ITã»ãã¥ãªãã£ã¢ããªã¹ãã®åœ¹å²ã¯ããããã¯ãŒã¯ãšã·ã¹ãã ã®å šäœçãªéçšã«é¢é£ããŠããŸãããããã£ãŠããããã¯ãŒã¯ããããžãŒãéä¿¡ãããã³ã«ããµãŒããŒãšããŒã¿ããŒã¹ã®ç®¡çãã¯ã©ãŠãã³ã³ãã¥ãŒãã£ã³ã°ãªã©ãITã€ã³ãã©ã¹ãã©ã¯ãã£ã®å šäœåã«ç²ŸéããŠããããšãéèŠã§ãã
ç¹ã«ãç°ãªãã¿ã€ãã®ãããã¯ãŒã¯æ»æãè åšãç解ãããããã«å¯Ÿæããããã®æŠç¥ãšã¡ã«ããºã ãèªèããèœåã¯çµ¶å¯Ÿå¿ èŠã§ãã
ããã«ãã¢ããªã¹ãã¯ã·ã¹ãã ã®æ§æãšç®¡çã«é¢ããŠãç¥èãšçµéšãæã€ã¹ãã§ããOSãããŒããŠã§ã¢ããœãããŠã§ã¢ãªã©ãã·ã¹ãã å šäœãšãã®åéšåã®ç¥èãå¿ èŠã§ãã
3.3 è匱æ§è©äŸ¡ãšãããã¬ãŒã·ã§ã³ãã¹ã
ãŸããITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãã·ã¹ãã ã®è匱æ§ãè©äŸ¡ããã»ãã¥ãªãã£ããªãŒããé²ãããã®ãã¹ããå®æœããèœåãæ±ããããŸããããã«ã¯ããããã¬ãŒã·ã§ã³ãã¹ã(ãŸãã¯ãã³ãã¹ã)ãšè匱æ§ã¹ãã£ã³ãå«ãŸããŸãã
ãããã¬ãŒã·ã§ã³ãã¹ãã¯ãçµç¹ã®ã·ã¹ãã ãããã«ãŒããµã€ããŒæ»æè ããã©ãã»ã©å®å šã§ããããè©äŸ¡ããããã®ã·ãã¥ã¬ãŒã·ã§ã³ã§ããäžæ¹ãè匱æ§ã¹ãã£ã³ã¯ã·ã¹ãã å ã®ã»ãã¥ãªãã£ããŒã«ãç¹å®ããããã®ææ³ã§ãã
ãããã®ãã¹ãã¯ãæœåšçãªåŒ±ç¹ãæããã«ããããããã©ãã»ã©ã®ãªã¹ã¯ãããããããè©äŸ¡ãããšãšãã«ãæã€ã¹ã察çãææ¡ããã®ã«åœ¹ç«ã¡ãŸãã
3.4 ãšã³ã¯ãªãã·ã§ã³ãšãã¡ã€ã¢ãŠã©ãŒã«ã®å®è£
æ å ±ãä¿è·ããããã®æãå¹æçãªæ段ã®1ã€ã¯ããšã³ã¯ãªãã·ã§ã³ãšãã¡ã€ã¢ãŠã©ãŒã«ã®äœ¿çšã§ãããšã³ã¯ãªãã·ã§ã³ã¯ãããŒã¿ãç¹å®ã®æå·åããŒãæã€äººã ããèªãããšãã§ãã圢åŒã«å€æããŸãã
ã¢ããªã¹ãã¯ãã©ã®ããŒã¿ãã©ã®ããã«æå·åããããã©ã®ãšã³ã¯ãªãã·ã§ã³æšæºã䜿çšããããã©ã®ããã«æå·åããŒã管çããããªã©ããšã³ã¯ãªãã·ã§ã³ã®æŠç¥ãšæé ãç解ããŠããªããã°ãªããŸããã
åæ§ã«ããã¡ã€ã¢ãŠã©ãŒã«ã¯ãäºæããªãã¢ã¯ã»ã¹ãäžæ£ãªäŸµå ¥ããã·ã¹ãã ãä¿è·ããŸããã¢ããªã¹ãã¯ãã¡ã€ã¢ãŠã©ãŒã«ã®é 眮ãšç®¡çãã«ãŒã«ã»ããã®æ§ç¯ãšæ¹åã«ã€ããŠãç¥èãæã€ã¹ãã§ãã
4. ITã»ãã¥ãªãã£ã¢ããªã¹ããå¿ èŠãšãããœããã¹ãã«
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãå°éçãªæè¡ç¥èã ãã§ãªããå€ãã®ãœããã¹ãã«ãå¿ èŠãšããŸããä»æ¥ã®ãã¯ãããžãŒã«ãããè åšã®é²åã«å¯Ÿå¿ããªãããITç°å¢ã®å®å šæ§ãšå®å šæ§ãç¶æããã«ã¯ãããã®ã¹ãã«ãäžå¯æ¬ ã§ãã以äžã§ãITã»ãã¥ãªãã£ã¢ããªã¹ããå¿ èŠãšãã4ã€ã®äž»èŠãªãœããã¹ãã«ã解説ããŸãã
4.1 åé¡è§£æ±ºèœå
ITã»ãã¥ãªãã£ã¢ããªã¹ãã®äž»ãªåœ¹å²ã®äžã€ããè åšãšçªçºçãªåé¡ã®è§£æ±ºã§ããåé¡è§£æ±ºèœåã¯ãè€éãªç¶æ³ãçŽ æ©ãç解ããé©åãªè§£æ±ºçãèŠã€ãåºãèœåã§ãã
æ¯æ¥æ°ããªã»ãã¥ãªãã£è åšãå¢ããŠãããæ¢åã®ãã³ãã¬ãŒããã¹ã¯ãªããã ãã§å¯Ÿå¿ã§ããããã§ã¯ãããŸããããã®ãããä¿è·ããã·ã¹ãã ãšè åšã«ã€ããŠã®æ·±ãç解ãšãå°é£ãªç¶æ³ã«å¯ŸåŠããããã®åµé çãªæèãæ±ããããŸãã
ãŸããåé¡è§£æ±ºã¯äºé²çãªã¢ãããŒãã§ãéèŠã§ãã»ãã¥ãªãã£ãªã¹ã¯ãæ©æã«ç¹å®ãããããåé¿ãŸãã¯è»œæžããæŠç¥ãçå®ããå¿ èŠããããŸãã
4.2 ã³ãã¥ãã±ãŒã·ã§ã³èœå
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãããŒã å å€ã®äººã ãšé »ç¹ã«ã³ãã¥ãã±ãŒã·ã§ã³ãåãå¿ èŠããããŸããã³ãã¥ãã±ãŒã·ã§ã³èœåã¯ããªã¹ã¯ãéåããŸãã¯è åšã®äºé²çãå¹æçã«èª¬æããå šå¡ãç解ã§ããããã«äŒããããã®èœåã§ãã
ãã®ã¹ãã«ã¯ç¹ã«éèŠã§ãã»ãã¥ãªãã£ã®åé¡ãå°é家ã§ãªã人ã ã«æ確ã«äŒãã誀解ãæ··ä¹±ãé¿ããããã«å¿ èŠã§ãããŸãã説åŸåãå¿ èŠã§ããªã¹ã¯ç®¡çã®ããã®éèŠãªæ±ºå®ããµããŒãããããã®åæãåŸãããã«ã¯ãããããã®éžæè¢ã®å¯èœæ§ãšçµæãåããããã説æããå¿ èŠããããŸãã
ããã«ãå€éšã®ã»ãã¥ãªãã£ãšãã¹ããŒãããã³ããŒãšé£æºããææ°ã®è åšãšå¯Ÿçã«ã€ããŠç¥èãå ±æããããã®ã³ãã¥ãã±ãŒã·ã§ã³ãå¿ èŠãšãããŸãã
4.3 ãããžã§ã¯ã管çèœå
å€ãã®å ŽåãITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ã»ãã¥ãªãã£ãããžã§ã¯ãã®å®è¡ãšç£èŠãæ åœããŸãããã®ããããããžã§ã¯ã管çèœåã¯ããããžã§ã¯ããé©åã«èšç»ãããªãœãŒã¹ãé åããé²è¡ã管çããæéãéµå®ããããã®éèŠãªã¹ãã«ãšãªããŸãã
æåãããããžã§ã¯ã管çã¯ãæ£ç¢ºãªèŠç©ãããã³ãã¥ãã±ãŒã·ã§ã³ããªã¹ã¯ç®¡çãå質管çã«äŸåããŠããŸãããããã¯ãã¹ãŠããããžã§ã¯ããäºå®éãé²è¡ããç®æšãéæãããããšã確èªããäžã§éèŠã§ãã
ããã«ãã»ãã¥ãªãã£ã¢ããªã¹ãã¯é«åºŠãªãã¯ãã«ã«ã¹ãã«ãšæ段ãå©çšããŠãããžã§ã¯ãã管çããèœåãå¿ èŠã§ããããã«ã¯ããããžã§ã¯ã管çããŒã«ã®äœ¿çšãå«ãå¯èœæ§ããããŸãã
4.4 现éšãžã®æ³šæåãšåæèœå
ã»ãã¥ãªãã£ã®ç¶æ³ã¯ããŸãã«ãæªéã¯çŽ°éšã«å®¿ããã§ãããã®ããã现éšãžã®æ³šæåãšåæèœåã¯ãITã»ãã¥ãªãã£ã¢ããªã¹ããæã€ã¹ãéèŠãªã¹ãã«ãšãªããŸãã
ã»ãã¥ãªãã£ãã¬ã€ã¯ãè åšã¯ããã°ãã°å°ããªå åã现ãããã¿ãŒã³ã®äžã«é ããŠããŸãããããã®åé¡ãèŠéããã«çºèŠãããããããžãã¹ãªã¹ã¯ã«å€æããèœåãå¿ èŠã§ãã
åæèœåã¯ã倧éã®ããŒã¿ãåŠçããæçšãªæ å ±ãæœåºãã詳现ãªã¬ããŒããäœæããããã«å¿ èŠã§ããããã«ãããäŒæ¥ã¯ããå¹æçãªã»ãã¥ãªãã£å¯Ÿçãè¬ããå°æ¥ã®è åšãäºæž¬ããããšãã§ããŸãã
5. ITã»ãã¥ãªãã£ã¢ããªã¹ãã®ãã£ãªã¢ãã¹ãšæé·æ©äŒ
ITã»ãã¥ãªãã£ã¢ããªã¹ãã®ãã£ãªã¢ãã¹ã¯ãåæã®åœ¹è·ããäžçŽè·ã管çè·ãŸã§æ§ã ãªã¹ããããéããŠæé·ã§ããæ©äŒãå€ãååšããŸãããŸããå°éæ§ãæ·±ããçµéšãç©ãããšã§ãçµç¹ã®ã»ãã¥ãªãã£ããªã·ãŒã®çå®ãããŒã ãªãŒããŒãªã©ã®åœ¹å²ã«é²ãããšãå¯èœã§ãã
ãã®ã»ã¯ã·ã§ã³ã§ã¯ãITã»ãã¥ãªãã£ã¢ããªã¹ãã®ãã£ãªã¢ãã¹ãšæé·æ©äŒããããŠææ°ãã¬ã³ãã«ã€ããŠè©³çŽ°ã«èª¬æããŸãã
ãã®æ¥çã§æåããããã«ã¯ãæè¡çèœåã ãã§ãªããæŠç¥çæèåããªãŒããŒã·ãããªã©ããœããã¹ãã«ãå¿ èŠãšãªããŸãã
5.1 ITã»ãã¥ãªãã£ã¢ããªã¹ãããé²ãããã£ãªã¢ãã¹ã®äŸ
ITã»ãã¥ãªãã£ã¢ããªã¹ããšããŠã®çµéšã¯ãã·ã¹ãã 管çè ãã»ãã¥ãªãã£ãããŒãžã£ãŒãITç£æ»ãšãã£ãä»ã®ITé¢é£è·ãžã®ç§»è¡ã容æã«ããŸãã
ããã«é«åºŠãªæè¡ãç¿åŸããããšã§ãã»ãã¥ãªãã£ãšã³ãžãã¢ãã»ãã¥ãªãã£ã¢ãŒããã¯ããšãã£ãå°éçãªè·çš®ãžé²ãéãéãããŸãããããã®è·çš®ã§ã¯ãçµç¹å šäœã®ã»ãã¥ãªãã£ãã¬ãŒã ã¯ãŒã¯ã®èšèšãå®è£ ãè¡ããäŒæ¥ã®è³ç£ãšæ å ±ãä¿è·ããŸãã
ãŸãããããžã¡ã³ãã¹ãã«ã磚ããçµå¶èŠç¹ã§ã»ãã¥ãªãã£åé¡ãèããèœåãããã°ãCISOïŒChief Information Security OfficerïŒãªã©ãäŒæ¥ã®ã»ãã¥ãªãã£æŠç¥å šè¬ãæå°ããããžã·ã§ã³ãžé²ãããšãå¯èœã§ãã
5.2 ITã»ãã¥ãªãã£ã¢ããªã¹ãã®ã¹ãã«ã¢ããã®ããã®è³æ ŒãšåŠç¿ãªãœãŒã¹
è³æ Œã¯æè¡åãšç¥èã®èšŒæã§ãããæ°ããªãã£ãªã¢å±éã«ããã足æãããšãªããŸãããã®ãããCertified Information Systems Security ProfessionalïŒCISSPïŒãCertified Information Security ManagerïŒCISMïŒãšãã£ããåœéçã«èªç¥ãããã»ãã¥ãªãã£è³æ Œã®ååŸã¯åŒ·ãæšå¥šãããŸãã
CybraryãCourseraãšãã£ããªã³ã©ã€ã³åŠç¿ãã©ãããã©ãŒã ã§ããã»ãã¥ãªãã£ã«é¢ããæ§ã ãªããã°ã©ã ãæäŸãããŠããŸãããããã®ãªãœãŒã¹ã掻çšããããšã§ãææ°ã®ã»ãã¥ãªãã£ãã¯ãããžãŒãšãã¬ã³ããè¿œãäºãå¯èœã«ãªããŸãã
ãŸããããã«ãŒã®æå£ãç解ããããã®ãšãã«ã«ãããã³ã°ã®ç¥èãéèŠã§ãããã®ãããå®åçµéšãšãšãã«ãCertified Ethical HackerïŒCEHïŒã®ãããªè³æ ŒãååŸããããšãããããããŸãã
5.3 ã»ãã¥ãªãã£åéã§ã®ææ°ãã¬ã³ããšã¢ããããŒã
ã»ãã¥ãªãã£åéã¯ãæ¥éã«å€åããITç°å¢ã«å¯Ÿå¿ãããããåžžã«æ°ãããã¬ã³ããšã¢ããããŒããçãŸããŠããŸãããã®ããããã ãã¶ããªç¥èãšçµéšãæã€ITã»ãã¥ãªãã£ã¢ããªã¹ãã§ããã°ããããã®ãã¬ã³ããç解ããé©åãªå¯Ÿçãé²ããããšãæ±ããããŸãã
ããšãã°ãã¯ã©ãŠãã³ã³ãã¥ãŒãã£ã³ã°ã®æ®åã«ãããã¯ã©ãŠãã»ãã¥ãªãã£ã®å°éç¥èãå¢ããŠããŠããŸãããŸãããµã€ããŒã»ãã¥ãªãã£æ³å¶åºŠã®é²åãããããã¯ãã§ãŒã³ãAIãªã©ã®æ°æè¡ã®åœ±é¿ãç解ããããšãéèŠã§ãã
ãããã®ææ°ãã¬ã³ããææ¡ããããã«ã¯ãå°éçãªã»ãããŒãWebinarããã¬ãŒãã³ã°ããã°ã©ã ãæ¥çã®ãããã§ãã·ã§ãã«ãšã®ãããã¯ãŒãã³ã°ãªã©ã掻çšãç¶ããŠããããšãå¿ èŠã§ãã
5.4 ITã»ãã¥ãªãã£ã¢ããªã¹ãã®çµŠäžãã¬ã³ããšæ±äººåžå Žã®åå
ã»ãã¥ãªãã£åéã®æ±äººåžå Žã¯æ¡å€§ã®äžéã蟿ã£ãŠããããã®èæ¯ã«ã¯ããžã¿ã«ãã©ã³ã¹ãã©ãŒã¡ãŒã·ã§ã³ã®é²è¡ãããµã€ããŒã»ãã¥ãªãã£ãžã®éèŠå¢ããããŸããããã¯ãITã»ãã¥ãªãã£ã¢ããªã¹ãã«ãšã£ãŠå€§ããªæé·æ©äŒãæå³ããŸãã
ãšã£ãè³æ Œãç¿åŸã¹ãã«ãçµéšå¹Žæ°ãªã©ã«ãã£ãŠããã®çµŠäžã¯å€§ããå€åããŸããå§çµæçã§ãªã絊äžã®ãã¬ã³ããææ¡ããããã«ã¯ãè·æ¥æ å ±ãµã€ããæ±äººåžå Žåæã¬ããŒããªã©ã®æ å ±ããã§ãã¯ããããšãæšå¥šãããŸãã
ãŸããå°éçãªãããã¯ãŒã¯ãç¯ãããšã§ãæ°ããªè·åæ©äŒãèŠã€ããããåæ¥ä»ç€Ÿã®çµŠäžã¬ãã«ãç¥ãããšãå¯èœã§ãããã®ãããæ¥çå£äœããããã§ãã·ã§ãã«ãããã¯ãŒã¯ãžã®åå ãæ±ããããŸãã
6. ITã»ãã¥ãªãã£ã¢ããªã¹ãã®å°±è·ã»è»¢è·ã®ãã€ã³ã
ITã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãæè¡çãªããŠããŠãšãªã¹ã¯ç®¡çãžã®æŽå¯åãçµã¿åãããç¬ç¹ãªåœ¹å²ãæãããŸããå°±è·ã転è·ãèããéã«ã¯ããã®ç¹æ§ãç解ãèªèº«ã®çµéšãã¹ãã«ããããŠè³æ Œãå¹æçã«æŽ»çšããããšãæ¬ ãããŸããã
6.1 ITã»ãã¥ãªãã£ã¢ããªã¹ãã®æ±ããããçµéšãšã¹ãã«ã®å ·äœäŸ
ITã»ãã¥ãªãã£ã¢ããªã¹ããšããŠå¿åããããã«ã¯ããŸãåºæ¬çãªITã¹ãã«ãå¿ èŠã§ããããã«ã¯ãããã¯ãŒã¯ãã·ã¹ãã ããœãããŠã§ã¢ã®ç¥èã ãã§ãªãæ»æææ³ããããã³ã°ã®åºç€ç¥èãå«ãŸããŸãããªããªããçµç¹ããµã€ããŒç¯çœªããå®ãããã«ã¯ãæ»æè ã®æèãç解ããããšãäžå¯æ¬ ã ããã§ãã
次ã«ããªã¹ã¯åæãITã»ãã¥ãªãã£ããªã·ãŒã®èšèšã»å®è£ çµéšãéèŠãªã¹ãã«ãšããŠæ±ããããŸãããããã®æ¥åã«ã¯ãåªããè«ççæèåãšåé¡è§£æ±ºã¹ãã«ããããŠã¯ãªãã£ã«ã«ã·ã³ãã³ã°ãå¿ èŠã§ãã
ããã«ãè€éãªã·ã¹ãã ã管çããæœåšçãªè匱æ§ãæ¢ãåºãããã®ã·ã¹ãã ç£èŠãŸãã¯ãããã¬ãŒã·ã§ã³ãã¹ããªã©ã®çµéšãå¿ èŠãªã¹ãã«ãšãããŠããŸãã
6.2 ã€ã³ã¿ãã¥ãŒã§åœ¹ç«ã€èªå·±PRã®ãã€ã³ã
ãšã³ããªãŒã¬ãã«ã®å Žåã§ãã£ãŠããITã»ãã¥ãªãã£ã¢ããªã¹ããšããŠç確ãªå€æãäžãããããªèªèº«ã®éå»ã®çµéšãã¢ããŒã«ããããšã¯éèŠã§ããã©ã®ããã«åŠãã§ããã®ããã©ã®ãããªãããžã§ã¯ãã«åå ãçµæãåºããŠããã®ããå ·äœçã«è¿°ã¹ãŸãããã
ãŸããããŒã ã§ã®ååçµéšãã³ãã¥ãã±ãŒã·ã§ã³èœåã倧åãªèŠçŽ ã§ããã»ãã¥ãªãã£ã¢ããªã¹ãã¯ãæè¡ããŒã ãçµå¶å±€ããããŠå Žåã«ãã£ãŠã¯æ³å·è¡æ©é¢ãšãé£æºããå¿ èŠããããããããããã¹ã ãŒãºã«è¡ããçµéšãã¢ããŒã«ãããšããã§ãããã
ããã«ãé²ãã§ç¥èãæŽæ°ãç¶ããæ欲ã瀺ãããšãéèŠã§ããITã»ãã¥ãªãã£ã¯æ¥éã«é²åãå€åããåéãªã®ã§ãææ°ã®è åšã«å¯Ÿå¿å¯èœãªãããã§ãã·ã§ãã«ã§ããããšã瀺ãããšã¯äŸ¡å€ããããŸãã
6.3 ITã»ãã¥ãªãã£åéã§æ±ããããå ·äœçãªè³æ Œãšãã®ååŸæ¹æ³
ITã»ãã¥ãªãã£ã¢ããªã¹ãã«æ±ããããè³æ ŒãšããŠã¯ãåœéçãªè©äŸ¡ãåããŠããCISSPãCISAãªã©ããããŸãããããã¯è©Šéšãåããããã«ã¯äžå®ã®å®åçµéšãå¿ èŠã§ãããããã«èŠåãã ãã®äŸ¡å€ãèªããããŠããŸãã
äžæ¹ãæ°é²ã®ITã»ãã¥ãªãã£å°é家ããããããã£ãªã¢ãç¯ãæ¹ã ã«ã¯ãCompTIA Security+ ãCEHïŒCertified Ethical HackerïŒãªã©ãé©ããŠããŸãããããã¯ITã»ãã¥ãªãã£ã®åºç€ç¥èã蚌æããå šäœçãªç解ãæ·±ããã®ã«åœ¹ç«ã€ããšã§ãããã
è³æ ŒååŸè ã«ã¯ã»ãã¥ãªãã£ã¢ããªã¹ããšããŠã®ã¹ãã«ãä¿æããã ãã§ãªããèªå·±ç éœãžã®æ欲ãšèœåã瀺ããã®ãšããŠèŠãããŸãã®ã§ãå°±è·ã»è»¢è·ã®éã«æå©ãšãªããŸãã
6.4 äŒæ¥ã®ITã»ãã¥ãªãã£ã¢ããªã¹ããšããŠåãã¡ãªãããšãã¡ãªãã
ITã»ãã¥ãªãã£ã¢ããªã¹ããšããŠåãäž»ãªã¡ãªãããšããŠãé«åºŠãªå°éã¹ãã«ãæ±ããããããã«èŠåã£ãå ±é ¬ãåŸãããããšãæããããŸãããŸããåŽååžå Žã«ãããé«ãéèŠããããå®å®ãããã£ãªã¢ãã¹ãæåŸ ã§ããŸãã
äžæ¹ããã¡ãªãããšããŠã¯ãéåžžãé«åºŠãªç·åŒµãšã¹ãã¬ã¹ã䌎ãä»äºã§ããã»ãã¥ãªãã£ã€ã³ã·ãã³ããçºçããå Žåã察å¿ã®è¿ éããšç²ŸåºŠã¯çµç¹ã«ãšã£ãŠéèŠãªåé¡ã§ãã®ã§ããã®è²¬ä»»ã¯å€§ããã§ãã
ãŸããæè¡çãªã¹ãã«ã®æŽæ°ã¯åžžã«æ±ãããããããåã ã®ãããã§ãã·ã§ãã«ãšããŠã®æé·ãç¶ããããã«ã¯ãèªå·±æè²ãšç éœãå¿ é ãšãªããŸãããããã¯èæ ®ãã¹ãéèŠãªèŠçŽ ãšãªããŸãã