問77
頻出度★★★
PDCA モデルに基づいて ISMS を運用している組織において, サーバ運用管理手順書に従って定期的に, “ウイルス検知用の定義ファイルを最新版に更新する” 作業を実施している。この作業は, PDCA モデルのどのプロセスで実施されるか。
平成29年度 秋期 ITパスポート試験 問77
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 77
Incorrectア
P (Plan) is the stage where the security policy and objectives are set, risks are assessed, and the measures and procedures to prepare are decided. The question describes carrying out work according to an already-established procedure manual, so it is the stage of executing the plan rather than planning itself, and does not belong to P.
- イ
正解 In the PDCA cycle, D (Do = operation) is the stage where security measures are actually introduced and operated according to the security policy and procedure manual established in the Plan (P) stage. The task in the question — updating the definition file to the latest version according to the server operation management procedure manual — carries out a routine security measure exactly as the predefined procedure specifies, so it belongs precisely to the operation (D) process. Therefore イ, which stands for D, is correct.
Incorrectウ
C (Check) is the stage where operational results are monitored and measured to confirm whether they function according to the policy and objectives. Updating the definition file is not an evaluation activity but the execution of the measure itself, so it does not belong to C.
Incorrectエ
A (Act) is the stage where procedures and mechanisms are corrected and improved based on the problems found in Check (C). The question is not a review or improvement of existing procedures but routine operational work following the manual, so it does not belong to A.
ここがポイント
- ISMS PDCA: P = planning the policy and procedures, D = introducing and operating measures according to the procedures, C = checking and evaluating effectiveness, A = correcting and improving.
- The key point is the distinction that routine work carrying out measures exactly as the established procedure specifies is classified as operation (D).
用語