問98
頻出度★★★
コンピュータやネットワークに関するセキュリティ事故の対応を行うことを目的とした組織を何と呼ぶか。
平成30年度 秋期 ITパスポート試験 問98
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 98
- ア
正解 The correct answer is (ア) CSIRT. CSIRT stands for Computer Security Incident Response Team, and refers to an organization that specializes in detecting, analyzing, responding to, and preventing the recurrence of security incidents (incidents) that occur on computers or networks. This matches exactly the definition the question asks for: an organization whose purpose is to respond to security incidents. There are in-house CSIRTs set up within a company, as well as organizations that serve as a national point of contact (such as JPCERT/CC in Japan), which handle the initial response when an incident occurs and coordinate communication with relevant parties.
Incorrectイ
ISMS stands for Information Security Management System, and refers to the mechanism or framework for continuously maintaining and improving an organization's information security. It is a management system, not the organization itself that specializes in incident response, so it is incorrect.
Incorrectウ
ISP stands for Internet Service Provider, a business that provides internet connection services to users. It is a provider of communication services, not an organization whose purpose is to respond to security incidents, so it is incorrect.
Incorrectエ
MVNO stands for Mobile Virtual Network Operator, a business that leases another company's mobile network to provide communication services such as mobile phones. It is a telecommunications carrier, not an organization responsible for security incident response, so it is incorrect.
ここがポイント
- CSIRT = Computer Security Incident Response Team. A term for an organization that specializes in detecting, responding to, and preventing the recurrence of security incidents (incidents).
- Distinguishing confusing abbreviations: ISMS is a mechanism for information security management, while ISP and MVNO are communication service providers; none of them is an incident response organization.
用語