Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

セキュリティチェックシートの話 / Security Check Sheet

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for mnuma mnuma
September 11, 2025
49
0

セキュリティチェックシートの話 / Security Check Sheet

Avatar for mnuma

mnuma

September 11, 2025

More Decks by mnuma

See All by mnuma
Datadogで始めるユーザー行動分析 / Getting Started with User Behavior Analysis Using Datadog
Avatar for mnuma mnuma
0
120
自動テストについて / Automated Testing
Avatar for mnuma mnuma
0
260
Kubernetesの自動アップグレードについて / Upgrading GKE cluster
Avatar for mnuma mnuma
0
230
AWS Auroraのスロークエリを Datadogで扱うまで / How to handle slow_queries_logs in AWS Aurora with Datadog
Avatar for mnuma mnuma
0
1.1k
Googleに学ぶDesign Docs / Learn from Google on Design Docs
Avatar for mnuma mnuma
0
200
Observabilityを実践する / Pragmatic observability
Avatar for mnuma mnuma
2
250
Kubernetes Case Studies #1@Makuake KubeCon NA 2019 Recap
Avatar for mnuma mnuma
0
180
カオスエンジニアリングについてヤホーで調べてきました / Enter the chaos engineering
Avatar for mnuma mnuma
0
140
Chaos Engineering 現状把握 / History Of Chaos Engineering
Avatar for mnuma mnuma
0
400

Featured

See All Featured
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
82
6.6k
The B2B funnel & how to create a winning content strategy
Avatar for Katarina Dahlin katarinadahlin
PRO
1
590
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.6k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
19k
Conquering PDFs: document understanding beyond plain text
Avatar for Ines Montani inesmontani
PRO
4
3.2k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
Tips & Tricks on How to Get Your First Job In Tech
Avatar for Honza Javorek honzajavorek
1
820
Pawsitive SEO: Lessons from My Dog (and Many Mistakes) on Thriving as a Consultant in the Age of AI
Avatar for David Carrasco davidcarrasco
0
290
Beyond borders and beyond the search box: How to win the global "messy middle" with AI-driven SEO
Avatar for David Carrasco davidcarrasco
3
290
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
12k
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
2
550
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k

Transcript

  1. >»½õúö³ñ·ó¿·üø~ û? 2025/09/09 TDU CySec ç«_ LT

  2. ¯?}Ï CySec כo üßn Web ¸ó¸û² / SRE (Site Reliability

    Engineering ÿ {ýŸ~ / ÷ýÀ¿ø»½úö³{·¿»sx|[t ÿj_yý²sv¹¿üø²ó÷wÝtvt~y

  3. »½õúö³ñ·ó¿·üø »½õúö³ñ·ó¿·üøx : ÿÕOm|Û±vt»SaaS ´ôüû^/f~±~þ¯~î_y [Excel ´Word _w¯~»½õúö³~þâwþ¯~owr»sx|[t ôüû´SaaS ~Y}f{{|ߘ

    https://smarthr.jp/about/security/

  4. »½õúö³ñ·ó¿·üø Qiita »½õúö³üñ·ó¿·üøxtv×x~¶ÛÛ - Qiita How do you like »½õúö³üñ·ó¿·üø

    ? ³ü³³³³³³¹¹¹ü³1³ ¹¹ü1³ü³1³¹¹¹ü ÿºü÷ûóÀö1Ÿ__ïu¿º »½õúö³üñ·ó¿& Qiita u³»½õúö³ñ·ó¿·üø²þtvtvÿº|Ÿq}vz~w”o}Þ²þt& »½õúö³ñ·ó¿·üøsv/Ywy¸} <Y}ý}o_w1Îo²¹sñ·ó¿·üø²3 oß~w{û{p~~ºwyÿ= <s¼NG €xY}w}zt³wyqyz³x{z¹ztwy&

  5. »½õúö³ñ·ó¿·üø~ºÜ e~wÞn±¹¼» _|ù5 ©/z¯_u

  6. »½õúö³ñ·ó¿·üø~ºÜ e~wÞn±¹¼» WÏ~÷ý»¹{ztv1Y}ý}_~ÿžw~Þ|ߘxz»±ü¹|[t2 WÏ~\þ²¶€'ï¼sß~oww²ÏŸzÞ߉{zsv»2 WÏõýü : úüù ò²úó° ‰þú'÷ò7PoC sº

    óh'¿ó »½õúö³ñ·ó¿·üøÞ û'ü¿ Y}ý} ^/'ÛoŸÛ

  7. »½õúö³ñ·ó¿·üø~ºÜ _´Õû|ù5 ÿû{¸sv_´Õû|ù5 _ /_ Excel ´ Word gßw^oôüû|ßxv}vt» SecureNavi

    (ISMS o÷µüó¹) Assured ( »½õúö³ßï÷ùóøõ¹üð) ³ Þß{ãù|¯¿¼»~wÛßözví{¿¼»±ü¹ Õû²ù5

  8. »½õúö³ñ·ó¿·üø~º Ü ©/z¯_u 50 <u~~Þu2ðú¸ü·÷ó²[t2 ¯~»½õúö³{þ²SaaS {n±v»sx|[t

  9. ¹¿üø²ó÷~ºÜ ^ÿ~O : CISO ²^ÿ»½õúö³ø¯|r»¿qwzt /¯gºÜ : Þ~þþ´èÿ|}/u¼z1üóõü'Ýïk|~ow´yt û}z‰n :

    ÿoö{¾í´Ûo?ž~û}z®n~wn±¹¼»±ü¹|[t ¿u³¹ø : }÷'ýÛ'Ÿ~|·¿»Õûz~w1Õ¿u{f—|{{»

  10. yvÿßwvt{ÿ BtoB SaaS ´svtNwÿûv»ºÜ2 ϟzÿß_vuxvzsx|݉2

  11. Þû÷W Google NotebookLM ²o Þß~²Ö}wv Google NotebookLM wÓwy»ß} Þ_{wp¹¼z1r»{þºw²/¯wÞ|ÿý ¸ó¸û²´÷ýð¿øñüð{{{¿¹z1»üû¹´CS

    w/kÞ|ÿý{

  12. ñ·ó¿·üø²}Ÿwvt׺} AWS ~¸vz¿ù¶ùùóÀü|³ó÷ù´²ó¹åy²Ï_}Ÿy»m¼2 T~¾'÷ÿüýüøÿISO 1SOC 1PCI DSS zy²À¶óýüùw}»ýü¿û|}Ÿu¼vt»2

  13. ñ·ó¿·üø²}Ÿwvt׺} AWS ~¸vz¿ù¶ùùóðü|³ó÷ù´²ó¹åy²Ï_}Ÿy»m¼2 https://smarthr.jp/about/security/

  14. }Ÿñ·ó¿·üø~ßÖ [/ö{}Ÿñ·ó¿·üø²ßÖy»ײŸÛ https://github.com/mnuma/awesome-public-check-sheet

  15. ¸Ówu¼»ñ·ó¿ú¹ø T~}Ÿ»½õúö³·üøwïO{þâu¼vt»sx|[t2 IPA þ¯ý/ <Ûyz¶·öµ´ø~_ºo= ¶·ö²÷ú±ü·÷ó~»½õúö³ßÍ ñ·ó¿ú¹ø Web çx~ÿ|zu¼vt»{ 2021

    ~3 o31 o}Š7 z4 w}Ÿ }nwmw (METI) <¿ù¶ùµüó¹üùû~ñ·ó¿ú¹ø= ÿog1ï¼g1gý‰þzy|ùü¹ 2010 ~8 o }Ÿ ;ÿ}Ÿu¼vzt|xv²¸¿¼vt» xtx}/özõ¹üþóø{zsvgvtzt }Ÿ~þ|rx÷t2ßogx^öy»±ü¹ûv}vt»~{zx}v2 ¯~»½õúö³{þ²/¼¿°±}\þ¯{zº|q2

  16. O…Û? ÿŸ{þzÛ?2 <SOC 2 zy~}Ÿ|zt|\ñ·ó¿·üø~Þxz»±ü¹|~~r»= ISMS ÿISO/IEC 27001  ISO/IEC

    27017 SOC Type2 / SOC Type1 »½õúö³ñ·ó¿·üøÞ~/uZ{²ö}w~y2 rtv×_Yx~´º×º²û÷Ww1þ\{Og~úß{tz|º~y2

  17. ~x± : CĞSpc w³psx²{wvt »½õúö³ñ·ó¿·üøxBtoB SaaS ²ßÛ~»ù{¹uvw~w2 _özÿßwz1zûù{xsv²ï¼g{tz|»sx|g²Ý‰ Cysec w³€÷¿²{w1ýÿö{»½õúö³²¿±vt}t