問33
頻出度★★☆
情報処理の関連規格のうち，情報セキュリティマネジメントに関して定めたものはどれか。
平成30年度 秋期 ITパスポート試験 問33
ストラテジ系法務 › 標準化関連
This question's explanation and your answers so far.
解説
問 33
Incorrectア
IEEE 802.3 is a standard that defines the physical-layer and data-link-layer communication methods of Ethernet, the representative wired LAN technology. It is an agreement about network transmission, not a standard that defines information security management.
- イ
正解 The correct answer is イ, “JIS Q 27001”. JIS Q 27001 is a standard that specifies the requirements for an information security management system (ISMS); it is a JIS standard that translates and aligns the international standard ISO/IEC 27001 for use within Japan. It defines how an organization should build, operate, maintain, and improve a management mechanism (management system) that protects information assets in terms of confidentiality, integrity, and availability, and thus exactly matches something that defines information security management.
Incorrectウ
JPEG 2000 is a standard that defines the compression and coding method for still images (such as photographs). It is a standard about the representation of image data and has nothing to do with information security management.
Incorrectエ
MPEG1 is a standard that defines the compression and coding methods for moving images and audio. It is a standard about handling video and audio data, not one that defines information security management.
ここがポイント
- JIS Q 27001 (ISO/IEC 27001) is a standard that specifies the requirements for an information security management system (ISMS), defining a management mechanism that protects the confidentiality, integrity, and availability of information.
- Identify the field from the standard's name: IEEE 802.3 covers LAN (Ethernet), JPEG covers still-image compression, and MPEG covers video/audio compression, each targeting a different domain.
用語