May 2026
Intermediate
496 pages
12h 11m
Japanese
book
実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
by Mark Buckwell, Stefaan Van daele, Carsten Horst, 石川 朝久
Content preview from 実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
11.4
ケーススタディ：脆弱性管理サービス
371
11.4
ケーススタディ：脆弱性管理サービス
本章の前半で、ケーススタディの脆弱性管理サービスに対する新たな派生要件を特定しました。表
11-2 に、脆弱性管理サービスのRACIを文書化し、提供者と利用者の責任を記述します。その中で、セ
キュリティサービスプロバイダは次のことを行わなければならないという項目があります。
3.3 脆弱性スキャンの結果を追跡し、リスクライフサイクルを管理する脆弱性管理機能を提供
する。
続けて、この脆弱性管理機能を支援するため、リスクライフサイクル管理を行うプロセス、手順、
作業指示について説明します。
11.4.1
プロセス定義
新たな脆弱性の特定から、脆弱性への対応、リスク受容の確認に至るまで、リスクを管理する際に
脆弱性がたどるべきステップについて考え始めます。図11-4 のステートチャート図は、脆弱性の様々な
状態変化を示しています。すべての状態変化には、人の介在、あるいは完全な自動化を伴うプロセス
が伴います。
1.
新しい脆弱性
4.
脆弱性
対応済み
12 カ月
VM-6
リスク受容の
キャンセル・
見直し
VM-8
リスク更新
VM-7
リスク受容
VM-7
リスク受容
VM-1脆弱性スキャン
VM-1
脆弱性スキャン
VM-1
脆弱性
スキャン
VM-1
脆弱性スキャン
VM-4
改善措置の割り当て
VM-5
改善措置の
キャンセル
VM-3
脆弱性のレビュー
VM-2
脆弱性のインポート
3.
改善措置の
割り当て
5.
リスク受容
2.
脆弱性の
レビュー
図 11-4 ステート ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.