INTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹
ãµã¤ãã¼ã»ãã¥ãªãã£ã®ã¤ã³ã·ãã³ã対å¿ä½å¶ãç¶æå¼·åãã¦ããå¿ è¦æ§
ã¹ãã¼ããã©ã³ã®æ®åããã¸ã¿ã«ãã©ã³ã¹ãã©ã¼ã¡ã¼ã·ã§ã³æ¨é²ãªã©ãæ¨ä»ã®ç¤¾ä¼ãä¼æ¥æ´»åã¨ITæè¡ã¯å¯æ¥ã«ç¹ãã£ã¦ãã¾ãã
ä¸æ¹ããµã¤ãã¼æ»æãå¢å ã®ä¸éã«ããããµãã©ã¤ãã§ã¼ã³ã®æ»æãå«ãã¦è¤éåããé«åº¦åãã¦ãã¾ãã
ä¼æ¥çã®äºæ¥ãæç¶çã«ç¶ç¶ãçºå±ãããªãã§ã¯ITæè¡ã®æ´»ç¨ã¯ãªãã¦ã¯ãªããªããã®ã§ãããè
å¨ã«å¯¾å¿ãã対çã¯éè¦ãªèª²é¡ã¨ãªã£ã¦ãã¾ãã
ä¼æ¥çãè
å¨ã«å¯¾å¿ããããã«éè¦ãªæ©è½ã âãµã¤ãã¼ã»ãã¥ãªãã£ã®ã¤ã³ã·ãã³ã対å¿ãé©åã«è¡ããã¨âã¨ãªããå¶åº¦ãçµç¹ãä»çµã¿ãªã©ã®ä½å¶ãæ§ç¯ãç¶æãã¦ãããã¨ãã¾ãã¾ãå¿
è¦ã¨ãªã£ã¦ãã¦ãã¾ãã
ã¤ã³ã·ãã³ã対å¿ãæ
ãæ©è½ã¯ç·æ¥æã«å¯¾å¿ãããã¨ã®ã¿ãªãããæ¥å¸¸çã«èªçµç¹çã«é¢é£ãããµã¤ãã¼ã»ãã¥ãªãã£ã®æ
å ±ãåéãæ´»ç¨ãããã¨ãè¦å¡ã®è²æãªã©ãç¶ç¶çã«è¡ããã¨ãå¿
è¦ã¨ãªãã¾ãã
ãINTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ãã®æ¦è¦
ãINTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ãã¯ãçµç¹çã«ã¤ã³ã·ãã³ã対å¿ãå®æ½ãã¦ããä½å¶ãæ§ç¯ããã客æ§ããèªçµç¹ã®ã¤ã³ã·ãã³ã対å¿ä½å¶ã«ããã¦æç¶å¯è½ãªä½å¶ãæ´åããã¦ãããã«ã¤ãã¦ä¸å®ãæãã¦ããã客æ§ãªã©ãã¤ã³ã·ãã³ã対å¿ä½å¶ã®ç¾ç¶ã«ã¤ãã¦å ·ä½çã«è©ä¾¡ã§ãããµã¼ãã¹ã§ããæ¬ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ã¯SIM3ï¼Security Incident Management Maturity Modelï¼ãå©ç¨ãã ãçµç¹ããã人æããããã¼ã«ãããããã»ã¹ã ã«ã¤ãã¦è©ä¾¡ãè¡ããã客æ§ã®ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã«ãããã¦ã£ã¼ã¯ãã¤ã³ããæ´ãåºããæ¹åã»å¼·åã®çºã®å©è¨ããããªãã¾ãã
æè³æ ¼è ãªã©ã«ãã調æ»ã®å®æ½
ãINTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ãã§ã¯ãSIM3ãã¬ã¼ãã¼â»ãããSIM3ç£æ»äººãã¨ãã£ãSIM3ã®è³æ ¼ä¿æè ãªã©ãæè³æ ¼è ããªã¼ãã¼ãåãè©ä¾¡ãå®æ½ãã¾ãã
â» 2023å¹´ç¾å¨ãSIM3ãã¬ã¼ãã¼ã¯æ¥æ¬ã§2å
è±å¯ãªçµé¨
å½ç¤¾ã¯ãéä¿¡ãéèã製é ãå°å£²çã¨ãã£ãå¤æ§ãªæ¥ç¨®ã®ã客æ§ã«å¯¾ãã¦ãã¤ã³ã·ãã³ã対å¿ã®ä½å¶æ´åãã¤ã³ã·ãã³ã管çããã®ä»éç¨æ¯æ´ãè¡ã£ã¦ããå®ç¸¾ãããã¾ããã¾ãã2000å¹´å½åããç´20å¹´ã«æ¸¡ãCSIRTæ´»åãè¡ãè±å¯ãªçµé¨ã¨ç¥è¦ãæãã¦ãã¾ãããããå®ç¸¾ã¨ç¥è¦ããã¨ã«ãã¦ãã客æ§ã®ç¶æ³ã«åãããå®å¹æ§ã®é«ãå©è¨ãã§ãããã¨ãå½ç¤¾ã®å¼·ã¿ã¨ãªãã¾ãã
ãINTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ãã®æä¾ã¤ã¡ã¼ã¸
ãINTELLILINK ãµã¤ãã¼ã¤ã³ã·ãã³ã対å¿ä½å¶ã¢ã»ã¹ã¡ã³ããµã¼ãã¹ãã¯ãã¤ã³ã·ãã³ã対å¿ä½å¶ã®ç¾ç¶ãSIM3ï¼Security Incident Management Maturity Modelï¼ãå©ç¨ãè©ä¾¡ãã¤ã³ã·ãã³ã対å¿ä½å¶ã«ãããã¦ã£ã¼ã¯ãã¤ã³ããæ´ãåºããæ¹åã»å¼·åã®çºã®å©è¨ããããªãã¾ãã
â»1 ã¤ã³ã·ãã³ã対å¿ä½å¶ã®è©ä¾¡ã§ãããã¤ã³ã·ãã³ãã®æ¤ç¥ææ³ããã«ã¦ã§ã¢è§£ææè¡ããã©ã¬ã³ã¸ãã¯èª¿æ»æè¡ãèå¼±æ§èª¿æ»ææ³ãªã©ã対象ã¨ãããã®ã§ã¯ããã¾ããã
â»2 Open CSIRT Foundation SIM3 online toolï¼https://opencsirt.org/csirt-maturity/sim3-online-tool/
SIM3ã¨ã¯
SIM3ï¼Security Incident Management Maturity Modelï¼ã¯ãEUãä¸å¿ã«å©ç¨ããã¦ããã»ãã¥ãªãã£ã¤ã³ã·ãã³ãã«ãããããã¸ã¡ã³ãã®æç度ã¢ãã«ã§ãããOpen CSIRT Foundationâ»ã2019å¹´5æã«ãã¼ã¸ã§ã³1ãå
¬éãã¾ãããï¼ææ°çã¯ãã¼ã¸ã§ã³2ï¼
ãçµç¹ããã人æããããã¼ã«ãããããã»ã¹ãã®4ã¤ã®ã«ãã´ãªãããã«44ã®è©ä¾¡é
ç®ãè¨å®ãããæç度ã¯ã1ãã4ã®ã¬ãã«ãå®ç¾©ããã対å¿ãã¦ããªãã¬ãã«0ãå«ãã¦5段éã§è©ä¾¡ãããã¨ã§ãCSIRTãã»ãã¥ãªãã£å¯¾å¿çµç¹ã®ã¤ã³ã·ãã³ãããã¸ã¡ã³ãã®æç度ã測ããã¨ãå¯è½ã§ãã
æ¨ä»ãã¤ã³ã·ãã³ã対å¿ãå®æ½ããçµç¹ã®æç度ãè©ä¾¡ããæç度ã¢ãã«ã¨ãã¦æ³¨ç®ãã 2022å¹´1æããã¯ãã°ãã¼ãã«ãªCSIRTã³ãã¥ããã£ã§ããFIRSTï¼Forum of Incident Response and Security Teamsï¼ã®å çæ¡ä»¶ã¨ãã¦SIM3ã«ããã»ã«ããã§ãã¯çµæã®æåºãæ±ããããããã«ãªã£ã¦ãã¾ãã
â» Open CSIRT Foundationï¼https://opencsirt.org/