ISO (国際標準化機構) によって規格化されているものはどれか。
平成30年度 秋期 ITパスポート試験 問14
This question's explanation and your answers so far.
問 14
Incorrectア
A content management system (CMS) is a general term for software products used to centrally manage and update content (text and images) such as web pages; it is not an international standard established by ISO.
- イ
正解 The correct answer is “イ Information security management system (ISMS)”. An ISMS is a framework that an organization operates to maintain and improve the confidentiality, integrity, and availability of information; its requirements have been internationally standardized as the ISO/IEC 27000 series, in particular ISO/IEC 27001, jointly established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Therefore, the item standardized by ISO is the ISMS.
Incorrectウ
A talent management system is a mechanism that manages personnel information such as employees' abilities and skills to support the use of talent; it is a tool in the human resources field, not an international standard set by ISO.
Incorrectエ
A knowledge management system is a mechanism for sharing and utilizing the knowledge and know-how accumulated within an organization; it does not correspond to the ISO-standardized management system that this question asks about.
- An ISMS (information security management system) is an organizational framework that maintains the confidentiality, integrity, and availability of information, and it has been internationally standardized as the ISO/IEC 27000 series (with requirements in ISO/IEC 27001).
- CMS, talent management, and knowledge management are names of systems and tools that support business operations; distinguish that they are not the ISO international standard itself that this question asks about.