問24
頻出度★★★
個人情報保護法では個人情報取扱事業者に対して安全管理措置を講じることを求めている。経済産業分野のガイドラインでは, 安全管理措置は技術的安全管理措置, 組織的安全管理措置, 人的安全管理措置, 物理的安全管理措置に分類している。このうち, 人的安全管理措置の具体例として, 適切なものはどれか。
平成27年度 秋期 ITパスポート試験 問24
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 24
Incorrectア
'Establishing regulations' and 'establishing an organizational structure composed of employees' are measures by which the organization defines management mechanisms and rules; they are classified as an 'organizational safety management measure', not a human measure.
- イ
正解 A 'human safety management measure' refers to a measure that acts on 'people', namely the employees; concretely, it means informing employees of their roles and responsibilities regarding safety management and conducting education and training. Choice イ is exactly 'conducting awareness-raising and training for employees on their roles and responsibilities regarding safety management', a typical example of a human measure that raises people's awareness and behavior, so it is correct.
Incorrectウ
'Per-employee access control for the information system that handles personal data' is a measure that protects via a technical mechanism within the system; it is classified as a 'technical safety management measure', not a human measure.
Incorrectエ
'Entry and exit management' and 'locked storage of media' are measures that protect the physical environment such as buildings, rooms, and recording media; they are classified as a 'physical safety management measure', not a human measure.
ここがポイント
- Safety management measures are divided into four categories: 'technical' (controls within the system), 'organizational' (establishing regulations and structure), 'human' (awareness-raising and education for employees), and 'physical' (entry/exit and lock management).
- The core of a human safety management measure is education, training, and awareness of roles and responsibilities directed at 'people' (employees); distinguish by determining which category the subject and means of each choice fall into.
用語