Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

セキュリティチェックシートの話 / Security Check Sheet

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for mnuma mnuma
September 11, 2025
49
0

セキュリティチェックシートの話 / Security Check Sheet

Avatar for mnuma

mnuma

September 11, 2025

More Decks by mnuma

See All by mnuma
Datadogで始めるユーザー行動分析 / Getting Started with User Behavior Analysis Using Datadog
Avatar for mnuma mnuma
0
110
自動テストについて / Automated Testing
Avatar for mnuma mnuma
0
260
Kubernetesの自動アップグレードについて / Upgrading GKE cluster
Avatar for mnuma mnuma
0
230
AWS Auroraのスロークエリを Datadogで扱うまで / How to handle slow_queries_logs in AWS Aurora with Datadog
Avatar for mnuma mnuma
0
1.1k
Googleに学ぶDesign Docs / Learn from Google on Design Docs
Avatar for mnuma mnuma
0
200
Observabilityを実践する / Pragmatic observability
Avatar for mnuma mnuma
2
250
Kubernetes Case Studies #1@Makuake KubeCon NA 2019 Recap
Avatar for mnuma mnuma
0
180
カオスエンジニアリングについてヤホーで調べてきました / Enter the chaos engineering
Avatar for mnuma mnuma
0
140
Chaos Engineering 現状把握 / History Of Chaos Engineering
Avatar for mnuma mnuma
0
400

Featured

See All Featured
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
7k
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
330
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
360
How to build an LLM SEO readiness audit: a practical framework
Avatar for Nick Samuel nmsamuel
2
960
End of SEO as We Know It (SMX Advanced Version)
Avatar for Michael King ipullrank
3
4.4k
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
880
30 Presentation Tips
Avatar for Ian Lurie portentint
PRO
1
430
Unsuck your backbone
Avatar for Amy Palamountain ammeep
672
58k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
21
1.7k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
7.2k
The B2B funnel & how to create a winning content strategy
Avatar for Katarina Dahlin katarinadahlin
PRO
1
580
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k

Transcript

  1. >»½õúö³ñ·ó¿·üø~ û? 2025/09/09 TDU CySec ç«_ LT

  2. ¯?}Ï CySec כo üßn Web ¸ó¸û² / SRE (Site Reliability

    Engineering ÿ {ýŸ~ / ÷ýÀ¿ø»½úö³{·¿»sx|[t ÿj_yý²sv¹¿üø²ó÷wÝtvt~y

  3. »½õúö³ñ·ó¿·üø »½õúö³ñ·ó¿·üøx : ÿÕOm|Û±vt»SaaS ´ôüû^/f~±~þ¯~î_y [Excel ´Word _w¯~»½õúö³~þâwþ¯~owr»sx|[t ôüû´SaaS ~Y}f{{|ߘ

    https://smarthr.jp/about/security/

  4. »½õúö³ñ·ó¿·üø Qiita »½õúö³üñ·ó¿·üøxtv×x~¶ÛÛ - Qiita How do you like »½õúö³üñ·ó¿·üø

    ? ³ü³³³³³³¹¹¹ü³1³ ¹¹ü1³ü³1³¹¹¹ü ÿºü÷ûóÀö1Ÿ__ïu¿º »½õúö³üñ·ó¿& Qiita u³»½õúö³ñ·ó¿·üø²þtvtvÿº|Ÿq}vz~w”o}Þ²þt& »½õúö³ñ·ó¿·üøsv/Ywy¸} <Y}ý}o_w1Îo²¹sñ·ó¿·üø²3 oß~w{û{p~~ºwyÿ= <s¼NG €xY}w}zt³wyqyz³x{z¹ztwy&

  5. »½õúö³ñ·ó¿·üø~ºÜ e~wÞn±¹¼» _|ù5 ©/z¯_u

  6. »½õúö³ñ·ó¿·üø~ºÜ e~wÞn±¹¼» WÏ~÷ý»¹{ztv1Y}ý}_~ÿžw~Þ|ߘxz»±ü¹|[t2 WÏ~\þ²¶€'ï¼sß~oww²ÏŸzÞ߉{zsv»2 WÏõýü : úüù ò²úó° ‰þú'÷ò7PoC sº

    óh'¿ó »½õúö³ñ·ó¿·üøÞ û'ü¿ Y}ý} ^/'ÛoŸÛ

  7. »½õúö³ñ·ó¿·üø~ºÜ _´Õû|ù5 ÿû{¸sv_´Õû|ù5 _ /_ Excel ´ Word gßw^oôüû|ßxv}vt» SecureNavi

    (ISMS o÷µüó¹) Assured ( »½õúö³ßï÷ùóøõ¹üð) ³ Þß{ãù|¯¿¼»~wÛßözví{¿¼»±ü¹ Õû²ù5

  8. »½õúö³ñ·ó¿·üø~º Ü ©/z¯_u 50 <u~~Þu2ðú¸ü·÷ó²[t2 ¯~»½õúö³{þ²SaaS {n±v»sx|[t

  9. ¹¿üø²ó÷~ºÜ ^ÿ~O : CISO ²^ÿ»½õúö³ø¯|r»¿qwzt /¯gºÜ : Þ~þþ´èÿ|}/u¼z1üóõü'Ýïk|~ow´yt û}z‰n :

    ÿoö{¾í´Ûo?ž~û}z®n~wn±¹¼»±ü¹|[t ¿u³¹ø : }÷'ýÛ'Ÿ~|·¿»Õûz~w1Õ¿u{f—|{{»

  10. yvÿßwvt{ÿ BtoB SaaS ´svtNwÿûv»ºÜ2 ϟzÿß_vuxvzsx|݉2

  11. Þû÷W Google NotebookLM ²o Þß~²Ö}wv Google NotebookLM wÓwy»ß} Þ_{wp¹¼z1r»{þºw²/¯wÞ|ÿý ¸ó¸û²´÷ýð¿øñüð{{{¿¹z1»üû¹´CS

    w/kÞ|ÿý{

  12. ñ·ó¿·üø²}Ÿwvt׺} AWS ~¸vz¿ù¶ùùóÀü|³ó÷ù´²ó¹åy²Ï_}Ÿy»m¼2 T~¾'÷ÿüýüøÿISO 1SOC 1PCI DSS zy²À¶óýüùw}»ýü¿û|}Ÿu¼vt»2

  13. ñ·ó¿·üø²}Ÿwvt׺} AWS ~¸vz¿ù¶ùùóðü|³ó÷ù´²ó¹åy²Ï_}Ÿy»m¼2 https://smarthr.jp/about/security/

  14. }Ÿñ·ó¿·üø~ßÖ [/ö{}Ÿñ·ó¿·üø²ßÖy»ײŸÛ https://github.com/mnuma/awesome-public-check-sheet

  15. ¸Ówu¼»ñ·ó¿ú¹ø T~}Ÿ»½õúö³·üøwïO{þâu¼vt»sx|[t2 IPA þ¯ý/ <Ûyz¶·öµ´ø~_ºo= ¶·ö²÷ú±ü·÷ó~»½õúö³ßÍ ñ·ó¿ú¹ø Web çx~ÿ|zu¼vt»{ 2021

    ~3 o31 o}Š7 z4 w}Ÿ }nwmw (METI) <¿ù¶ùµüó¹üùû~ñ·ó¿ú¹ø= ÿog1ï¼g1gý‰þzy|ùü¹ 2010 ~8 o }Ÿ ;ÿ}Ÿu¼vzt|xv²¸¿¼vt» xtx}/özõ¹üþóø{zsvgvtzt }Ÿ~þ|rx÷t2ßogx^öy»±ü¹ûv}vt»~{zx}v2 ¯~»½õúö³{þ²/¼¿°±}\þ¯{zº|q2

  16. O…Û? ÿŸ{þzÛ?2 <SOC 2 zy~}Ÿ|zt|\ñ·ó¿·üø~Þxz»±ü¹|~~r»= ISMS ÿISO/IEC 27001  ISO/IEC

    27017 SOC Type2 / SOC Type1 »½õúö³ñ·ó¿·üøÞ~/uZ{²ö}w~y2 rtv×_Yx~´º×º²û÷Ww1þ\{Og~úß{tz|º~y2

  17. ~x± : CĞSpc w³psx²{wvt »½õúö³ñ·ó¿·üøxBtoB SaaS ²ßÛ~»ù{¹uvw~w2 _özÿßwz1zûù{xsv²ï¼g{tz|»sx|g²Ý‰ Cysec w³€÷¿²{w1ýÿö{»½õúö³²¿±vt}t