Learn in the textbookHuman Security Measures
DefinitionThe Insider Misconduct Prevention Guidelines (内部不正防止ガイドライン) set out the principles and measures for preventing insider misconduct by employees, former employees and other people inside an organization, and were compiled by the IPA (Information-technology Promotion Agency, Japan).
ExplanationInsider misconduct means acts such as someone inside the organization taking information out or abusing their privileges to alter data. Rather than focusing only on punishing offenders, the guidelines put weight on creating an environment where misconduct does not arise in the first place. They lay out measures for the whole organization, from how top management should be involved to privilege management, record reviews and training.
AnalogyIt resembles the house rules of an apartment building. Deciding in advance how keys are managed, how comings and goings are logged and how shared areas are used keeps trouble from arising.
Memory hookThe publisher, the IPA, is also the body that runs the IT Passport exam.