問10
頻出度★★★
プライバシーマーク制度で評価されるマネジメントシステムが, 管理の対象とするものはどれか。
平成27年度 秋期 ITパスポート試験 問10
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 10
Incorrectア
A trade secret refers to confidential information protected by the Unfair Competition Prevention Act, such as a company’s technology, know-how, or customer lists. This is about keeping business activities confidential and is a different concept from the personal information that the Privacy Mark (PMS) manages, so it is incorrect.
- イ
正解 The Privacy Mark system is a scheme in which a third party evaluates and certifies whether a business operator has properly built and operated a “Personal Information Protection Management System (PMS)” based on JIS Q 15001. What this management system manages is the “personal information” itself, such as name, address, and date of birth, and it guarantees the proper acquisition, use, management, and protection of that information as a system. Therefore, the management target is “personal information”, so イ is correct.
Incorrectウ
Portrait rights are a personal right not to have one’s face or figure photographed or made public without the person’s consent. Although it is a right related to an individual, what the Privacy Mark system manages and protects as a system is personal information; it is not a system whose management target is portrait rights themselves, so it is incorrect.
Incorrectエ
An information system refers to information assets in general, such as hardware, software, and networks, and protecting these is the role of an Information Security Management System (ISMS, JIS Q 27001). What the Privacy Mark specifically manages is personal information itself, so it is incorrect.
ここがポイント
- The Privacy Mark system is a third-party certification scheme for the Personal Information Protection Management System (PMS) based on JIS Q 15001, and its management target is “personal information”.
- Understand the difference from ISMS (JIS Q 27001), which protects information assets in general. The Privacy Mark is a system specialized in protecting personal information.
用語