クレジットカード決済基盤を支えるSRE - 厳格な監査とSRE運用の両立 (SRE Kaigi 2026)

by capytan

Embed

Start on current slide

Slide 1

Slide 1 text

ΫϨδοτΧʔυܾࡁج൫Λࢧ͑Δ43& ݫ֨ͳ؂ࠪͱ43&ӡ༻ͷཱ྆ :PTVLF.J[VHVDIJ !DBQZUBO@FM 43&,BJHJ

Slide 2

Slide 2 text

*OUSPEVDUJPO ຊ೔ͷτʔΫʹ͍ͭͯ 🕵 ݫ֨ͳηΩϡϦςΟ؂͕ࠪ͋Δ؀ڥͰɺ؂ࠪରԠΛ43&͕Ͳ͏΍Δ͔ 🧩 ίϯϓϥΠΞϯεɾηΩϡϦςΟରԠͷ՝୊ײΛ͍࣋ͬͯΔਓ΁ 🤖 'JO5FDIҎ֎ͷ8FCΞϓϦέʔγϣϯͰ΋Ԡ༻Մೳͳ͜ͱ

Slide 3

Slide 3 text

4NBSU#BOL *OD 4PGUXBSF&OHJOFFS 43& :PTVLF.J[VHVDIJ !DBQZUBO@FM !DBQZUBO *OUSPEVDUJPO

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

*OUSPEVDUJPO w ΧʔυܾࡁΛऔΓѻ͏ w 1$*%44४ڌ͕ࣄۀܧଓʹඞਢ

Slide 7

Slide 7 text

*OUSPEVDUJPO w ΧʔυܾࡁΛऔΓѻ͏ w 1$*%44४ڌ͕ࣄۀܧଓʹඞਢ

Slide 8

Slide 8 text

Ωʔϫʔυ 1$*%44

Slide 9

Slide 9 text

ରԠ·Ͱ΍ͬͨਓ͸গͳ͍͸ͣɾɾɾʁ

Slide 10

Slide 10 text

*OUSPEVDUJPO #FGPSFೖࣾલͷ1$*%44४ڌαʔϏε΁ͷҹ৅ େมͦ͏ ಛผͳରԠ͕ඞཁͰ ։ൃ͕ࢭ·Γͦ͏ ಛघߏ੒ ௨ৗͷ8FCΞϓϦͱ͸ҧ͏ ಛघͳΠϯϑϥ͕ඞཁͦ͏ ࢓ࣄ಺༰ 43&ͷ࢓ࣄ͕ ؂ࠪରԠ͹͔ΓʹͳΓͦ͏

Slide 11

Slide 11 text

*OUSPEVDUJPO େมͦ͏ ಛผͳରԠ͕ඞཁͰ ։ൃ͕ࢭ·Γͦ͏ ಛघߏ੒ ௨ৗͷ8FCΞϓϦͱ͸ҧ͏ ಛघͳΠϯϑϥ͕ඞཁͦ͏ ࢓ࣄ಺༰ 43&ͷ࢓ࣄ͕ ؂ࠪରԠ͹͔ΓʹͳΓͦ͏ ʮ1$*%44४ڌͷΠϯϑϥͬͯɺΨνΨνͰ਎ಈ͖͕औΕͳ͍Μ͡Όͳ͍͔ͳʁʯ #FGPSFೖࣾલͷ1$*%44४ڌαʔϏε΁ͷҹ৅

Slide 12

Slide 12 text

*OUSPEVDUJPO "GUFS࣮ࡍʹೖࣾͨ͠ޙͷ1$*%44४ڌαʔϏε΁ͷҹ৅ ಛघղͳ͠ Πϯϑϥߏஙʹ ಛघͳߏ੒͸ෆཁ ϕετϓϥΫςΟε 43&ͷجຊ͕ͦͷ·· ؂ࠪରԠʹͳΔ ೔ৗӡ༻ #"6 #VTJOFTTBT6TVBM Λ ͏·͘ճͨ͢Ίͷ޻෉ ͔͠͠ɺΊͬͪΌؤுΔඞཁ͸͋Δ

Slide 13

Slide 13 text

*OUSPEVDUJPO "GUFS࣮ࡍʹೖࣾͨ͠ޙͷ1$*%44४ڌαʔϏε΁ͷҹ৅ ಛघղͳ͠ Πϯϑϥߏஙʹ ಛघͳߏ੒͸ෆཁ ϕετϓϥΫςΟε 43&ͷجຊ͕ͦͷ·· ؂ࠪରԠʹͳΔ ೔ৗӡ༻ #"6 #VTJOFTTBT6TVBM Λ ͏·͘ճͨ͢Ίͷ޻෉ ͔͠͠ɺΊͬͪΌؤுΔඞཁ͸͋Δ ʮίϯϓϥΠΞϯεରԠ͸ಛผͳ͜ͱͰ͸ͳ͘ɺ43&ͷϓϥΫςΟεΛ༻͍ͯղܾͰ͖Δʂʯ

Slide 14

Slide 14 text

*OUSPEVDUJPO 1$*%44ͱ͸ ίϯϓϥΠΞϯεରԠΛ͢Δฐࣾ43&ͷ՝୊ Ξϓϩʔν ࣮ફྫ ·ͱΊ 0VUMJOF օͰ΍͖ͬͯͨ͜ͱΛ͓࿩͠͠·͢

Slide 15

Slide 15 text

*OUSPEVDUJPO ຊηογϣϯ͸৘ใఏڙͷΈΛ໨తͱ͓ͯ͠Γɺ1$*%44४ڌΛอূ ͢Δ΋ͷͰ͸͋Γ·ͤΜɻ ஫ҙ

Slide 16

Slide 16 text

1$*%44ͱ͸

Slide 17

Slide 17 text

1$*%44ͱ͸ w ΫϨδοτΧʔυ৘ใΛѻ͏اۀʹ՝͞ΕΔηΩϡϦςΟج४ w 7JTBɺ.BTUFSDBSEɺ+$#ͳͲΧʔυϒϥϯυ͕ࡦఆ w ͷཁ݅ΧςΰϦɺ໿ͷৄࡉཁ݅ w ४ڌ͠ͳ͍ͱΧʔυܾࡁαʔϏεΛఏڙͰ͖ͳ͍ w ೥ʹ౓ɺΦϯαΠτ؂ࠪΛཁ͢Δ 1$*%44 1BZNFOU$BSE*OEVTUSZ%BUB4FDVSJUZ4UBOEBSE

Slide 18

Slide 18 text

1$*%44ͱ͸ ΧςΰϦ ֓ཁ ωοτϫʔΫ ϑΝΠΞ΢ΥʔϧɺσϑΥϧτઃఆͷมߋ σʔλอޢ อଘσʔλͷ҉߸Խɺ௨৴ͷ҉߸Խ ੬ऑੑ؅ཧ Ϛϧ΢ΣΞରࡦɺηΩϡΞͳ։ൃ ΞΫηε੍ޚ ࠷খݖݶɺೝূɺ෺ཧηΩϡϦςΟ ؂ࢹɾςετ ϩά؂ࢹɺఆظతͳηΩϡϦςΟςετ ϙϦγʔ ৘ใηΩϡϦςΟϙϦγʔͷҡ࣋ ݟ׳Εͨཁ݅Ͱ͸ͳ͔Ζ͏͔

Slide 19

Slide 19 text

1$*%44ͱ͸ w ৹݄ࠪͷ໿ϲ݄͸ରԠʹ͔͔Γ͖Γ w ΦϯαΠτ৹ࠪʹ޲͚ͨ४උͷෛ୲ w ؂ࠪূ੻ͷऔಘɺϩάϨϏϡʔɺঝೝϑϩʔ؅ཧ w ཁ݅จॻͷղऍͱηΩϡϦςΟࣾ಺نఆͷ࡞੒ 1$*%44ͷݫ͠͞

Slide 20

Slide 20 text

1$*%44ͱ͸ ͪΐ͏Ͳ͍·ผͷΠϕϯτͰฐࣾ43&&.΋1$*%44ʹ͍ͭͯ࿩͍ͯ͠Δ օɺΊͬͪΌؤுͬͯ·͢ !NBBBBUP

Slide 21

Slide 21 text

43&ͷ໾ׂͱ՝୊

Slide 22

Slide 22 text

43&ͷ໾ׂͱ՝୊ w Πϯϑϥج൫શମͷ৴པੑΛ୲౰ w ૊৫ԣஅతʹࢧԉ w ηΩϡϦςΟཁ݅ΛΠϯϑϥ૚Ͱٵऩ͠ɺ1$*%44४ڌ؀ڥӡ༻ ౰ࣾͰͷ43&ͷ໾ׂ ☝ϓϩμΫτ։ൃνʔϜͷͨΊʹɺ৴པੑͷߴ͍ϓϥοτϑΥʔϜΛఏڙ͢Δ

Slide 23

Slide 23 text

43&ͷ໾ׂͱ՝୊ 2ʮηΩϡϦςΟνʔϜ΍ઐ໳෦ॺ͕ରԠ͢΂͖Ͱ͸ͳ͍ͷ͔ʁʯ ͳͥ43&͕1$*%44ରԠΛ୲͏ͷ͔

Slide 24

Slide 24 text

43&ͷ໾ׂͱ՝୊ "ʮਓ਺͕গͳ͍'JO5FDIελʔτΞοϓ͔ͩͬͨΒʢʁʣʯ ͳͥ43&͕1$*%44ରԠΛ୲͏ͷ͔

Slide 25

Slide 25 text

43&ͷ໾ׂͱ՝୊ l4FDVSJUZBOE43&DPNFUISPVHICFJOHTVDDFTTGVMNPSFPGUFO OPU GBJMJOHMFTTz lηΩϡϦςΟͱ43&͸ɺࣦഊΛݮΒ͢ͷͰ͸ͳ͘ɺ੒ޭΛΑΓଟ͘ ͢Δ͜ͱͰୡ੒͞ΕΔʢঞ༁ʣz *TUIF4JO43&GPSl4FDVSJUZz +PIO#FOOJOHIP ff 43&DPO "NFSJDBT ͳͥ43&͕1$*%44ରԠΛ୲͏ͷ͔ DGIUUQTXXXVTFOJYPSHDPOGFSFODFTSFDPOBNFSJDBTQSFTFOUBUJPOCFOOJOHIPGG

Slide 26

Slide 26 text

Slide 27

Slide 27 text

43&ͷ໾ׂͱ՝୊ EFUFDUBOPNBMJFT BMFSUBOESFQPSU ʮ#"6ϓϩηε͕ҟৗΛݕ஌͠ɺΞϥʔτͱใࠂΛߦ͍ɺ੹೚ऀ͕ ద࣌ʹରॲͰ͖ΔΑ͏ʹ͢Δ͜ͱ͕ॏཁͰ͋Δɻʯ 1$*%44WͷηΫγϣϯ ཁ໿ ☝43&͕೔ৗతʹ΍͍ͬͯΔ͜ͱͦͷ΋ͷͰ͸ʁ

Slide 28

Slide 28 text

43&ͷ໾ׂͱ՝୊ ͳͥ43&͕1$*%44ରԠΛ୲͏ͷ͔

Slide 29

Slide 29 text

43&ͷ໾ׂͱ՝୊ 43& ΨΠυϥΠϯΛ΋ͱʹࣗಈૢॎγεςϜΛߏங͠ɺ ܭثͷҟৗΛଈ࠲ʹम෮͢ΔΤϯδχΞϦϯάΛ͢Δ ൺᄻɿߤւͱ43& 1$*%44 ҆શͳߤւͷͨΊͷߤւ೔ࢽͷॻ͖ํͱ ఺ݕ߲໨ͷΨΠυϥΠϯͱͳΔ΋ͷ ˠ43&͸1$*%44४ڌΛޮ཰తʹ࣮ݱ͢Δखஈͱͯ͠ଊ͑Δ

Slide 30

Slide 30 text

43&ͷ໾ׂͱ՝୊ ൺᄻɿߤւͱ43&Λ۩ମԽ͢Δ ߤւ 43& ߤւ೔ࢽ ূ੻ʢϩά ఺ݕ߲໨ ઃఆɾϨϏϡʔ ࣗಈૢॎ ࣗಈԽ

Slide 31

Slide 31 text

43&ͷ໾ׂͱ՝୊ w ؂ࠪϩάϨϏϡʔ w ূ੻ͷऩू w ΞΫηεݖݶͷ୨Է͠ w ੬ऑੑεΩϟϯ࣮ ⾏ w ηΩϡϦςΟύονద ⽤ ౰ࣾ43&͕୲͏؂ࠪରԠ࡞ۀͷҰ෦

Slide 32

Slide 32 text

43&ͷ໾ׂͱ՝୊ w ؂ࠪϩάϨϏϡʔ w ؂ࠪূ੻ͷऩू w ੬ऑੑεΩϟϯ w ՝୊1$*%44ͷཁ݅Λຬͨ͢ʹ͸ଟ͘ͷ࡞ۀ͕ൃੜ͢Δ 43&ͷർฐʹͭͳ͕Δ

Slide 33

Slide 33 text

43&ͷ໾ׂͱ՝୊ ฐࣾ&.ͷݴ༿Λࢥ͍ग़͠·͠ΐ͏ ·ͩ·ͩؤுͬͯΔ෦෼͕ͨ͘͞Μ͋Γ·͢ !NBBBBUP

Slide 34

Slide 34 text

ؤுΔ͚Ͳɺָ΋͍ͨ͠

Slide 35

Slide 35 text

43&ͷ໾ׂͱ՝୊ 5PJMຊ൪αʔϏεΛಈ͔͢͜ͱʹؔ܎͢Δ࡞ۀͰɺҎԼͷಛੑΛ࣋ ͭ܏޲͕͋Δ΋ͷ ख࡞ۀ ܁Γฦ͞ΕΔ ࣗಈԽՄೳ ઓज़త ௕ظతͳՁ஋͕ͳ͍ αʔϏε੒௕ʹ ൺྫͯ͠૿Ճ DGIUUQTDMPVEHPPHMFDPNCMPHQSPEVDUTNBOBHFNFOUUPPMTJEFOUJGZJOHBOE USBDLJOHUPJMVTJOHTSFQSJODJQMFT

Slide 36

Slide 36 text

43&ͷ໾ׂͱ՝୊ w ؂ࠪϩάϨϏϡʔʢຖ ⽉ ʣ w ۪௚ʹ໨HSFQΛ͢Δʹ͸ͭΒ͍ख࡞ۀ w ఆظతʹ֬ೝ͢Δඞཁੑ w ͋Δఔ౓ࣗಈԽ͕Մೳͳੑ࣭͕͋Δ w ϩάྔʹൺྫͯ͠࡞ۀ͸૿Ճ͍ͯ͘͠ 5PJMͷಛੑΛຬ͔ͨ͢ʁ

Slide 37

Slide 37 text

43&ͷ໾ׂͱ՝୊ w 5PJMख࡞ۀɾ܁Γฦ͠ɾࣗಈԽՄೳɾεέʔϧ͠ͳ͍ w 1$*%44؂ࠪରԠ࡞ۀ͸͜ΕΒͷಛੑΛຬͨ͢৔߹͕͋Δ w ख࡞ۀͷ··Ͱ͸5PJMԽ͠΍͍͢ ·ͱΊ؂ࠪରԠ͸ؾΛ͚ͭͳ͍ͱ5PJMԽ͠΍͍͢ ☝ιϑτ΢ΣΞΤϯδχΞϦϯάͰղܾ͠Α͏

Slide 38

Slide 38 text

ࢲͨͪͷΞϓϩʔν

Slide 39

Slide 39 text

ηΩϡϦςΟཁ݅ΛΠϯϑϥͰٵऩ͢Δ

Slide 40

Slide 40 text

جຊํ਑ͷͭͷப ಛघղ͸ͳ͍ɻઃܭͰٵऩ͢Δɻ

Slide 41

Slide 41 text

͔͜͜Β"84ͷྫ͕த৺ͱͳΓ·͢

Slide 42

Slide 42 text

είʔϓͷ࠷খԽ

Slide 43

Slide 43 text

"84ΞΧ΢ϯτ෼཭ઓུ 71$Ͱ͸ͳ͘ ʮ"84ΞΧ΢ϯτϨϕϧͰ෼཭ʯ ४ڌ؀ڥͱඇ४ڌ؀ڥΛΞΧ΢ϯτ͝ͱ׬શʹ෼͚Δઓུ

Slide 44

Slide 44 text

"84ΞΧ΢ϯτ෼཭ઓུ ͳͥΞΧ΢ϯτϨϕϧͰ෼཭͢Δͷ͔ ϩά͕ࠞ͟Βͳ͍ $MPVE5SBJM͕ࣗવʹ෼཭͞ΕΔ ڥք͕໌֬ ʮ͜ͷΞΧ΢ϯτ͕είʔϓʯ ͱݴ͍੾ΕΔ Өڹൣғ͕খ͍͞ ޡઃఆͷӨڹൣғΛݶఆͰ͖Δ

Slide 45

Slide 45 text

"84ΞΧ΢ϯτ෼཭ઓུ ؀ڥͷߏ੒

Slide 46

Slide 46 text

"84ΞΧ΢ϯτ෼཭ઓུ %JTUJODUGBJMVSFEPNBJOTMJNJUUIFCMBTU SBEJVTPGBGBJMVSFBOEUIFSFGPSFBMTP JODSFBTFSFMJBCJMJUZ ผݸͷো֐υϝΠϯʢEJTUJODUGBJMVSF EPNBJOʣ͸ɺো֐ͷʮര෩൒ܘʯΛ੍ݶ͠ɺ ͕ͨͬͯ͠৴པੑ΋޲্ͤ͞·͢ɻ 1 ஄ྗੑΑΓҾ༻ (PPHMFͷʰ#VJMEJOH4FDVSFBOE3FMJBCMF4ZTUFNTʱ

Slide 47

Slide 47 text

ڥք௨৴

Slide 48

Slide 48 text

ڥք௨৴ ZVUBEBZP DGIUUQTTQFBLFSEFDLDPNZVUBEBZPTUBSUVQY fi OUFDI

Slide 49

Slide 49 text

࣮ફྫ ϚωʔδυαʔϏεͷ׆༻

Slide 50

Slide 50 text

جຊํ਑ͷͭͷப w "84ɺ(PPHMF$MPVEɺ"[VSFͳͲ͕1$*%44४ڌΛऔಘࡁΈ w ϗϫΠτϖʔύʔɺίϯϓϥΠΞϯεΨΠυΛެ։ w ੹೚ڞ༗ϞσϧʹΑΓɺΠϯϑϥ૚ͷηΩϡϦςΟΛΦϑϩʔυ ύϒϦοΫΫϥ΢υͷ׆༻

Slide 51

Slide 51 text

ύϒϦοΫΫϥ΢υͷ׆༻ ੹೚ڞ༗Ϟσϧ FY"84 Ҿ༻IUUQTBXTBNB[PODPNKQDPNQMJBODFTIBSFESFTQPOTJCJMJUZNPEFM

Slide 52

Slide 52 text

1$*%44४ڌϚωʔδυαʔϏε 1$*%44ධՁείʔϓʹؚ·ΕΔαʔϏεΛ༏ઌ࠾༻

Slide 53

Slide 53 text

1$*%44४ڌϚωʔδυαʔϏε &$4'BSHBUF

Slide 54

Slide 54 text

1$*%44४ڌϚωʔδυαʔϏε $PHOJUP

Slide 55

Slide 55 text

1$*%44४ڌϚωʔδυαʔϏε ,.4

Slide 56

Slide 56 text

࣮ફྫ ࣗಈԽͷపఈ

Slide 57

Slide 57 text

ࣗಈԽͷపఈ ࣗಈԽઓུͷ૚

Slide 58

Slide 58 text

ࣗಈԽͷపఈ $*$%ηΩϡϦςΟνΣοΫ

Slide 59

Slide 59 text

ࣗಈԽͷపఈ ҟৗݕ஌ͷࣗಈԽ

Slide 60

Slide 60 text

ࣗಈԽͷపఈ 1"/ࠞೖ༧๷ͷػೳΛ αʔόʔαΠυΤϯδχΞ͕࣮૷ ҟৗݕ஌ͷࣗಈԽ DGIUUQTCMPHTNBSUCBOLDPKQFOUSZ

Slide 61

Slide 61 text

ࣗಈԽͷపఈ ఆظλεΫɾ؂ࠪূ੻ͷলྗԽ

Slide 62

Slide 62 text

·ͱΊ

Slide 63

Slide 63 text

·ͱΊ ,FZ5BLFBXBZT

Slide 64

Slide 64 text

㲔 Smart, Secure, Mobile Super powered Banking and Living. ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ !DBQZUBO@FM ࣭໰ɾϑΟʔυόοΫ͓ؾܰʹͲ͏ͧ