SOX æºæ ã®ããã®ãµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ãå©çšããŠããã«ãŒããããžãã¹ãå®ãã«ã¯ã©ãããã°ããã§ãããã?
絶ãéãªãå€åããããžã¿ã«ç°å¢ã«ãããŠãããŒã¿ã»ãã¥ãªãã£ã¯äŒæ¥ã«ãšã£ãŠæåªå äºé ãšãªã£ãŠããŸããå¢å€§ããããã«ãŒã®è åšã«çŽé¢ããŠãå¹æçãªãµã€ããŒã»ãã¥ãªãã£æ £è¡ãå°å ¥ããããšãäžå¯æ¬ ã§ããããã«é¢é£ããŠãSOX (ãµãŒãã³ã¹ã»ãªã¯ã¹ãªãŒæ³) ãžã®æºæ ã¯ãæ©å¯ããŒã¿ã®ä¿è·ã匷åããæè³å®¶ãå©å®³é¢ä¿è ã®ä¿¡é Œãä¿èšŒããããã«äžå¯æ¬ ãªããŒã«ã§ããããšã蚌æãããŠããŸããããžãã¹ããµã€ããŒæ»æããä¿è·ããSOX èŠå¶ãžã®æé©ãªã³ã³ãã©ã€ã¢ã³ã¹ã確ä¿ããããã®ãã¹ã ãã©ã¯ãã£ã¹ãæ¢ã£ãŠã¿ãŸãããã SOX ã³ã³ãã©ã€ã¢ã³ã¹ã®éèŠæ§ãç解ãã ãµãŒãã³ã¹ã»ãªã¯ã¹ãªãŒæ³ (ãœãã¯ã¹ïŒã¯ã2002 幎ã«ç±³åœè°äŒã«ãã£ãŠå¶å®ããã財åå ±åãšã³ãŒãã¬ãŒã ã¬ããã³ã¹ã®éææ§ã説æ責任ãèª å®æ§ãåäžãããããšãç®çãšããŠããŸãããã®æ³åŸã¯ããšã³ãã³ãã¯ãŒã«ãã³ã ãªã©ã®å€§äŒæ¥ã®è²¡åã¹ãã£ã³ãã«ãåããŠå¶å®ããããã®ã§ãããç±³åœã®äžå ŽäŒæ¥ã«ãšã£ãŠããã®æ³åŸã®éµå®ã¯å¿ é ã§ãããéµå®ããªãå Žåã¯ãæ³çããã³è²¡åäžé倧ãªåœ±é¿ãçããå¯èœæ§ããããŸãã SOX ã«åºã¥ããµã€ããŒã»ãã¥ãªãã£èŠä»¶ ãµãŒãã³ã¹ã»ãªã¯ã¹ãªãŒæ³ã¯äž»ã«è²¡åå ±åãšã³ãŒãã¬ãŒãã»ã¬ããã³ã¹ã«çŠç¹ãåœãŠãŠããŸããã ãµã€ããŒã»ãã¥ãªã㣠財åããŒã¿ã®å®å šæ§ãæ©å¯æ§ãå¯çšæ§ã確ä¿ããäžã§éèŠãªåœ¹å²ãæãããŸããæ³åŸã®ããã€ãã®æ¡é ã¯ããµã€ããŒã»ãã¥ãªãã£ã®å®è·µãšã³ã³ãã©ã€ã¢ã³ã¹ã®åãçµã¿ã«éæ¥çã«åœ±é¿ãäžããŸãã 財åå ±åã®å éšçµ±å¶ (ICFR) SOX ã®ç¬¬ 404 æ¡ã§ã¯ãäžå ŽäŒæ¥ã«å¯Ÿãã財åå ±åã«å¯Ÿããé©åãªå éšçµ±å¶ (ICFR) ã確ç«ããã³ç¶æããããšãæ±ããããŠããŸãããµã€ããŒã»ãã¥ãªãã£å¶åŸ¡ãªã© ã¢ã¯ã»ã¹å¶åŸ¡ã㶠ããŒã¿æå·å ãããŠãã® äŸµå ¥æ€ç¥ã·ã¹ãã ãéèããŒã¿ãäžæ£ãªã¢ã¯ã»ã¹ãæäœãé瀺ããä¿è·ããããã«äžå¯æ¬ ã§ãã ãªã¹ã¯ã®è©äŸ¡ãšç®¡ç SOX ã¯ã財åå ±åã®æ£ç¢ºæ§ãšå®å šæ§ã«åœ±é¿ãäžãããªã¹ã¯ãç¹å®ããè©äŸ¡ããããã«ãªã¹ã¯è©äŸ¡ãå®è¡ããããšãäŒæ¥ã«å¥šå±ããŠããŸãã㶠ãµã€ããŒã»ãã¥ãªãã£ã®ãªã¹ã¯ãããŒã¿äŸµå®³ãè匱ãªã·ã¹ãã ãªã©ãèæ ®ããé©åãªæ段ã§è»œæžããå¿ èŠããããŸãã ããŒã¿ã®å®å šæ§ãšæ©å¯æ§ 財åããŒã¿ã®æ£ç¢ºæ§ãå®å šæ§ãæ©å¯æ§ã確ä¿ããã«ã¯ãäŒæ¥ã¯ã»ãã¥ãªãã£å¯Ÿçãè¬ããå¿ èŠããããŸãã ãµã€ããŒã»ãã¥ãªã㣠ããŒã¿æå·åãæŽåæ§ãã§ãã¯ãã¢ã¯ã»ã¹å¶åŸ¡ãªã©ãããã¯ãéèããŒã¿ãäžæ£ãªã¢ã¯ã»ã¹ãæ¹ããããä¿è·ããã®ã«åœ¹ç«ã¡ãŸãã SOX ã³ã³ãã©ã€ã¢ã³ã¹ã®ããã®ãµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ SOX ã«æºæ ããããã«ãŒããããžãã¹ãä¿è·ããããã«ãæ¡çšãã¹ããµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ãããã€ã玹ä»ããŸãã ãã¹ã¯ãŒã管ç: è€éã§é·ããã¹ã¯ãŒããã§ããã°ãã¹ãã¬ãŒãºã䜿çšããŠãã ããã ãã¹ã¯ãŒãã®åå©çšãçŠæ¢ãããã¹ã¯ãŒã ãããŒãžã£ãŒã®äœ¿çšã奚å±ããŸãã å ±æãã¹ã¯ãŒãã®äœ¿çšãé¿ããå¿ èŠã«å¿ããŠè¿œå ã®å¶åŸ¡ãé©çšããŸãã è€éã§é·ããã¹ã¯ãŒããã§ããã°ãã¹ãã¬ãŒãºã䜿çšããŠãã ããã ãã¹ã¯ãŒãã®åå©çšãçŠæ¢ãããã¹ã¯ãŒã ãããŒãžã£ãŒã®äœ¿çšã奚å±ããŸãã å ±æãã¹ã¯ãŒãã®äœ¿çšãé¿ããå¿ èŠã«å¿ããŠè¿œå ã®å¶åŸ¡ãé©çšããŸãã å€èŠçŽ èªèšŒ (MFA): éèã·ã¹ãã ã«ã¢ã¯ã»ã¹ããã«ã¯å€èŠçŽ èªèšŒãå¿ èŠãšããŸãã é»åã¡ãŒã«ãŸã㯠SMS èªèšŒèŠçŽ ãé¿ããããŒããŠã§ã¢ ããŒã¯ã³ãŸãã¯èªèšŒã¢ããªã±ãŒã·ã§ã³ãåªå ããŸãã éèã·ã¹ãã ã«ã¢ã¯ã»ã¹ããã«ã¯å€èŠçŽ èªèšŒãå¿ èŠãšããŸãã é»åã¡ãŒã«ãŸã㯠SMS èªèšŒèŠçŽ ãé¿ããããŒããŠã§ã¢ ããŒã¯ã³ãŸãã¯èªèšŒã¢ããªã±ãŒã·ã§ã³ãåªå ããŸãã ãã£ãã·ã³ã°åçºãã¬ãŒãã³ã°: ãŠãŒã¶ãŒããã¬ãŒãã³ã°ããŠããã£ãã·ã³ã°æ»æã®ãªã¹ã¯ãèªèãããäžå¯©ãªé»åã¡ãŒã«ãã¡ãã»ãŒãžãå ±åããããä¿ããŸãã ãã£ãã·ã³ã° ã·ãã¥ã¬ãŒã·ã§ã³æŒç¿ãå®è¡ããŠããµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ã匷åããŸãã ãŠãŒã¶ãŒããã¬ãŒãã³ã°ããŠããã£ãã·ã³ã°æ»æã®ãªã¹ã¯ãèªèãããäžå¯©ãªé»åã¡ãŒã«ãã¡ãã»ãŒãžãå ±åããããä¿ããŸãã ãã£ãã·ã³ã° ã·ãã¥ã¬ãŒã·ã§ã³æŒç¿ãå®è¡ããŠããµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ã匷åããŸãã ããŒã¿ç®¡çã®å®è·µ: æ©å¯ã®è²¡åããŒã¿ãä¿è·ããããšã®éèŠæ§ãšã管çãã¹ãäžæ£ãªé瀺ã®åœ±é¿ã«ã€ããŠãŠãŒã¶ãŒãæè²ããŸãã ããŒã¿åé¡ããªã·ãŒãå®è£ ããŠã財åæ å ±ã®æ©å¯æ§ãšé©åãªç®¡çæ £è¡ãå®çŸ©ããŸãã æ©å¯ã®è²¡åããŒã¿ãä¿è·ããããšã®éèŠæ§ãšã管çãã¹ãäžæ£ãªé瀺ã®åœ±é¿ã«ã€ããŠãŠãŒã¶ãŒãæè²ããŸãã ããŒã¿åé¡ããªã·ãŒãå®è£ ããŠã財åæ å ±ã®æ©å¯æ§ãšé©åãªç®¡çæ £è¡ãå®çŸ©ããŸãã ããã€ã¹ã®ã»ãã¥ãªãã£: ã·ã¹ãã ã財åããŒã¿ã«ã¢ã¯ã»ã¹ããããã€ã¹ãææ°ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ãšã»ãã¥ãªã㣠ãããã§ä¿è·ãããŠããããšã確èªããŸãã ããã€ã¹ãæå·åããŠããŒã«ã«ã«ä¿åãããããŒã¿ãä¿è·ãããªã¢ãŒã ã¯ã€ãæ©èœãæå¹ã«ããŸãã ã·ã¹ãã ã財åããŒã¿ã«ã¢ã¯ã»ã¹ããããã€ã¹ãææ°ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ãšã»ãã¥ãªã㣠ãããã§ä¿è·ãããŠããããšã確èªããŸãã ããã€ã¹ãæå·åããŠããŒã«ã«ã«ä¿åãããããŒã¿ãä¿è·ãããªã¢ãŒã ã¯ã€ãæ©èœãæå¹ã«ããŸãã ãªã¢ãŒãã¯ãŒã¯ã®ã»ãã¥ãªãã£: åŸæ¥å¡ã財åããŒã¿ã®ã»ãã¥ãªãã£ãæãªãããšãªããªã¢ãŒãã§äœæ¥ã§ããããã«ãå®å šãªãªã¢ãŒã ã¢ã¯ã»ã¹ ããªã·ãŒãšæé ã確ç«ããŸãã å®å šãªä»®æ³ãã©ã€ããŒã ãããã¯ãŒã¯ (VPN) ãšãªã¢ãŒã ãã¹ã¯ããã ãããã³ã«ã䜿çšããŠããªã¢ãŒãæ¥ç¶çµç±ã§éä¿¡ãããããŒã¿ãæå·åããŸãã åŸæ¥å¡ã財åããŒã¿ã®ã»ãã¥ãªãã£ãæãªãããšãªããªã¢ãŒãã§äœæ¥ã§ããããã«ãå®å šãªãªã¢ãŒã ã¢ã¯ã»ã¹ ããªã·ãŒãšæé ã確ç«ããŸãã å®å šãªä»®æ³ãã©ã€ããŒã ãããã¯ãŒã¯ (VPN) ãšãªã¢ãŒã ãã¹ã¯ããã ãããã³ã«ã䜿çšããŠããªã¢ãŒãæ¥ç¶çµç±ã§éä¿¡ãããããŒã¿ãæå·åããŸãã è€éã§é·ããã¹ã¯ãŒããã§ããã°ãã¹ãã¬ãŒãºã䜿çšããŠãã ããã ãã¹ã¯ãŒãã®åå©çšãçŠæ¢ãããã¹ã¯ãŒã ãããŒãžã£ãŒã®äœ¿çšã奚å±ããŸãã å ±æãã¹ã¯ãŒãã®äœ¿çšãé¿ããå¿ èŠã«å¿ããŠè¿œå ã®å¶åŸ¡ãé©çšããŸãã éèã·ã¹ãã ã«ã¢ã¯ã»ã¹ããã«ã¯å€èŠçŽ èªèšŒãå¿ èŠãšããŸãã é»åã¡ãŒã«ãŸã㯠SMS èªèšŒèŠçŽ ãé¿ããããŒããŠã§ã¢ ããŒã¯ã³ãŸãã¯èªèšŒã¢ããªã±ãŒã·ã§ã³ãåªå ããŸãã ãŠãŒã¶ãŒããã¬ãŒãã³ã°ããŠããã£ãã·ã³ã°æ»æã®ãªã¹ã¯ãèªèãããäžå¯©ãªé»åã¡ãŒã«ãã¡ãã»ãŒãžãå ±åããããä¿ããŸãã ãã£ãã·ã³ã° ã·ãã¥ã¬ãŒã·ã§ã³æŒç¿ãå®è¡ããŠããµã€ããŒã»ãã¥ãªãã£ã®ãã¹ã ãã©ã¯ãã£ã¹ã匷åããŸãã æ©å¯ã®è²¡åããŒã¿ãä¿è·ããããšã®éèŠæ§ãšã管çãã¹ãäžæ£ãªé瀺ã®åœ±é¿ã«ã€ããŠãŠãŒã¶ãŒãæè²ããŸãã ããŒã¿åé¡ããªã·ãŒãå®è£ ããŠã財åæ å ±ã®æ©å¯æ§ãšé©åãªç®¡çæ £è¡ãå®çŸ©ããŸãã ã·ã¹ãã ã財åããŒã¿ã«ã¢ã¯ã»ã¹ããããã€ã¹ãææ°ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ãšã»ãã¥ãªã㣠ãããã§ä¿è·ãããŠããããšã確èªããŸãã ããã€ã¹ãæå·åããŠããŒã«ã«ã«ä¿åãããããŒã¿ãä¿è·ãããªã¢ãŒã ã¯ã€ãæ©èœãæå¹ã«ããŸãã åŸæ¥å¡ã財åããŒã¿ã®ã»ãã¥ãªãã£ãæãªãããšãªããªã¢ãŒãã§äœæ¥ã§ããããã«ãå®å šãªãªã¢ãŒã ã¢ã¯ã»ã¹ ããªã·ãŒãšæé ã確ç«ããŸãã å®å šãªä»®æ³ãã©ã€ããŒã ãããã¯ãŒã¯ (VPN) ãšãªã¢ãŒã ãã¹ã¯ããã ãããã³ã«ã䜿çšããŠããªã¢ãŒãæ¥ç¶çµç±ã§éä¿¡ãããããŒã¿ãæå·åããŸãã ã€ã³ã·ãã³ãã®ç®¡çãšå¯Ÿå¿ SOX ã«ã¯æ瀺çã«èšèŒãããŠããŸãããã財åå ±åãšã³ã³ãã©ã€ã¢ã³ã¹ã«å¯Ÿãããµã€ããŒã»ãã¥ãªã㣠ã€ã³ã·ãã³ãã®åœ±é¿ã軜æžããã«ã¯ãã€ã³ã·ãã³ã管çãšå¯Ÿå¿æ©èœãäžå¯æ¬ ã§ããäŒæ¥ã¯ãããŒã¿äŸµå®³ãäžæ£ã¢ã¯ã»ã¹ãªã©ã®ãµã€ããŒã»ãã¥ãªãã£ã€ã³ã·ãã³ããè¿ éã«å ±åãã察å¿ããããã®æé ãæŽåããå¿ èŠããããŸãã ãµãã©ã€ãã§ãŒã³ã®ãªã¹ã¯ã®ç®¡ç SOX ã§ã¯ãã·ã¹ãã ãŸãã¯è²¡åããŒã¿ã«ã¢ã¯ã»ã¹ã§ãããµãŒãããŒã㣠ãã³ããŒã«é¢é£ãããªã¹ã¯ãè©äŸ¡ãã管çããããšãäŒæ¥ã«çŸ©åä»ããŠããŸããäŒæ¥ã¯ããµãŒãããŒãã£ãã³ããŒã®ãµã€ããŒã»ãã¥ãªãã£ã®å®è·µãšç®¡çãè©äŸ¡ããŠãã»ãã¥ãªãã£åºæºãæºããã財åå ±åã®å®å šæ§ããªã¹ã¯ã«ããããŠããªãããšã確èªããå¿ èŠããããŸãã ç£æ»åœ¹ã®ç¬ç«æ§ãšç£ç£ SOX ã§ã¯ã財åç£æ»ã®å®¢èŠ³æ§ãšå®å šæ§ãä¿èšŒããããã«ç£æ»äººã®ç¬ç«æ§ãæ±ããããŠããŸãããµã€ããŒã»ãã¥ãªãã£ã®ç®¡çãšå®è·µã¯ç£æ»ããã»ã¹ã«é¢é£ããŠãããç£æ»äººã®å éšçµ±å¶ãšè²¡åå ±åã®è©äŸ¡ã«åœ±é¿ãäžããå¯èœæ§ããããŸãã ãœãŒã¹ïŒ www.tripwire.com…