FinTech スタートアップのセキュリティチェックシートとの向き合い方 / AWS FinTech Bootcamp! Compliance

by Yuichiro SAITO

Slide 1

Slide 1 text

Slide 2

Slide 2 text

• ( ) • • 20 • Amazon Lightsail, Amazon Route 53 @koemu

Slide 3

Slide 3 text

• − • FISC FISC •

Slide 4

Slide 4 text

Disclaimer • • • AWS • AWS

Slide 5

Slide 5 text

1. 2. AWS 3. 4. 5.

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

✖ ( ) ( FinTech) ( )

Slide 8

Slide 8 text

z ⾒

Slide 9

Slide 9 text

FinTech Startups ( ) ( ) FISC PCI DSS NIST SP800 ISMS SOC2 FedRAMP ISO/IEC 27001 3850

Slide 10

Slide 10 text

FISC ( ) 2022 7 10 FISC --- (FISC ) 1985 12 FISC (FISC )

Slide 11

Slide 11 text

AWS ( ) ( ) https://aws.amazon.com/jp/compliance/shared-responsibility-model/

Slide 12

Slide 12 text

AWS

Slide 13

Slide 13 text

FISC (FISC ) FISC AWS AWS https://aws.amazon.com/jp/compliance/fisc/

Slide 14

Slide 14 text

AWS AWS AWS https://d0.awsstatic.com/whitepapers/compliance/JP_Whitepapers/AWS_Risk_and_Complia nce_Overview_JP.pdf

Slide 15

Slide 15 text

AWS Artifact AWS Adobe Acrobat FISC SOC2 PCI ISO27001

Slide 16

Slide 16 text

No content

Slide 17

Slide 17 text

AWS NO FISC / YES FISC AWS AWS Artifact AWS

Slide 18

Slide 18 text

• 1) • − AWS Fargate − Amazon Aurora MySQL 蓄 − Amazon Elastic Load Balancer AWS WAF 蓄 AWS Cloud VPC Amaazon CloudFront AWS WAF Elastic Load Balancing AWS Fargate Amazon Aurora

Slide 19

Slide 19 text

• − 1) • − AWS AWS AWS

Slide 20

Slide 20 text

FISC • − 1) • FISC 49 →

Slide 21

Slide 21 text

• − 1) • − ✖: ※ − : AWS − : AWS ISO/IEC 27001 AWS AWS AWS • − ⾒ AWS ⾒

Slide 22

Slide 22 text

No content

Slide 23

Slide 23 text

AWS Security Hub AWS Security Hub FinTech https://aws.amazon.com/jp/security-hub/

Slide 24

Slide 24 text

FISC Well-Architected Framework FSI Lens for FISC Baseline Environment on AWS for FSI 3 https://github.com/aws-samples/baseline-environment-on-aws-for-financial-services-institute

Slide 25

Slide 25 text

Fintech Blueprint on AWS FinTech AWS CloudFormation https://aws.amazon.com/jp/quickstart/architecture/ﬁntech-blueprint/

Slide 26

Slide 26 text

AWS PCI DSS PCI DSS AWS https://d1.awsstatic.com/whitepapers/ja_JP/compliance/pci-dss-compliance-on-aws.pdf

Slide 27

Slide 27 text

NIST SP800-53, 171 AWS AWS https://docs.aws.amazon.com/ja_jp/config/latest/developerguide/operational-best- practices-for-nist-800-53_rev_5.html https://docs.aws.amazon.com/ja_jp/config/latest/developerguide/operational-best- practices-for-nist_800-171.html

Slide 1

Slide 1 text

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Slide 24

Slide 24 text

Slide 25

Slide 25 text

Slide 26

Slide 26 text

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

Slide 30

Slide 30 text