September 2025
Intermediate
544 pages
19h 22m
Japanese
Content preview from マルチクラウドセキュリティの教科書 クラウド横断で実現する堅牢なセキュリティ基盤
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter 7 法規制、監査、リスク、およびコンプライアンス
422
助言型監査と保証型監査の概要
種類 助言型監査（
Advisory Audit
） 保証型監査（
Assurance Audit
）
目的 セキュリティ改善のための推奨を提供
組織が定める基準や法規制などの判断基準を満たして
いることを証明
報告内容 改善のための勧告 保証するための意見
実施主体
内部監査チーム、セキュリティエンジニア
（
DevSecOps
主体なら開発エンジニアも該当）
外部監査機関、コンプライアンス部門、独立した監
査人
監査手法 継続的な評価、自動監査ツール（
CSPM
など）を活用 監査証跡の確認、エビデンス収集、監査報告書の作成
主なツール
AWS Security Hub
、
Azure Policy
、
Microsoft
Defender for Cloud
、
Microsoft Sentinel
、
Security
Command Center (Google Cloud)
、
Oracle Cloud
Guard
、各 種 フ レ ー ム ワ ー ク（
CIS Benchmarks
など）
監査報告書（
SOC
2 レポート、
ISO
27001 監査結
果）、第三者監査機関の証明
適用例
• AWS Well-Architected Tool
によるベストプラク
ティス評価
• CSPM
ツールを使ったセキュリティスコア分析
•
企業が策定したセキュリティポリシーの順守状況
チェック
• SOC
2
監査の実施
• ISO
27001
認証取得のための監査 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.