Markdown Editor
エディターを開く

ISMS顧客信頼キット

ISMSを顧客の信頼につなげる：セキュリティホワイトペーパーとトラストセンター、認証マークの使用、質問票回答ライブラリ、管理策対応表、顧客向けセキュリティ付属書、NDA、委託先契約。

8 件のテンプレートを、使う順に 3 ステップで並べています。エディターで開いて記入し、PDF、DOCX、HTML に書き出せます。

ステップ 1

顧客の信頼

  1. Security Whitepaper and Trust Centre Template (ISO/IEC 27001)

    フル

    Publication rules, what never to publish, gated documents, approval workflow, trust centre page blocks, whitepaper sections, certification wording, sub-processors, security.txt

    ISO/IEC 27001:2022 7.4, A.5.1, A.5.12, A.5.14, A.5.34 (cited only); ISO/IEC 27002:2022; RFC 9116

  2. Certification Mark Usage Rules Template (ISO/IEC 27001)

    フル

    Certificate and CB mark use: rule sources, licensed marks, scope-limited claims, prohibited uses, channels, wording examples, approval log

    ISO/IEC 27001:2022 + Amd 1:2024 clause 7.4 (cited only); ISO/IEC 17021-1:2015 clause 8.3; CB and accreditation rules
ステップ 2

質問票

  1. Security Questionnaire Answer Library Template (CAIQ, SIG, ISO/IEC 27001)

    フル

    Answer owners, honest answer rules, CCM v4.1 domain index mapped to Annex A, answer record format, approved answers, sharing tiers and NDA gating, workflow, review triggers

    ISO/IEC 27001:2022 7.4, 7.5, A.5.12, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; CSA CAIQ v4.1 and SIG (names only)

  2. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    フル

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)

  3. SOC 2 Control Mapping Template

    フル

    All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

    AICPA 2017 TSC (rev. points of focus 2022); DC 200 (2018, rev. 2022)
ステップ 3

契約

  1. Customer Security Addendum Template (ISO/IEC 27001 A.5.20)

    フル

    Order of precedence, certifications upkeep, personnel, sub-processors, data location, incident notification, audit rights, testing, deletion, liability pointer, negotiation playbook

    ISO/IEC 27001:2022 A.5.14, A.5.20, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-2:2022

  2. Confidentiality Agreement Template (ISO/IEC 27001 A.6.6)

    フル

    Confidentiality requirements analysis, five agreement variants, signing gate, register, review, model clauses incl. protected disclosures and return

    ISO/IEC 27001:2022 A.6.6 (cited only); ISO/IEC 27002:2022

  3. Supplier Security Agreement Template (ISO/IEC 27036, A.5.20)

    フル

    Security schedule for supplier contracts: clauses by tier, audit rights, incident notice, sub-contractors, data location, ICT supply chain, exit, deviations

    ISO/IEC 27001:2022 A.5.19 to A.5.22 (cited only); ISO/IEC 27036-2:2022; ISO/IEC 27036-3:2023