問90
頻出度★★★
情報セキュリティマネジメントが PDCA サイクルに基づくとき, C に相当するものはどれか。
平成30年度 春期 ITパスポート試験 問90
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 90
Incorrectア
'Establish the objectives, processes, and procedures for information security' is the activity of defining policies and procedures, corresponding to P (Plan) in PDCA, not C (Check).
Incorrectイ
'Make improvements through corrective and preventive measures based on the evaluation' is the activity of improving in response to evaluation results, corresponding to A (Act) in PDCA, not C (Check).
Incorrectウ
'Introduce and operate the processes and procedures' is the activity of actually running the planned processes, corresponding to D (Do) in PDCA, not C (Check).
- エ
正解 Information security management (ISMS) is continually improved based on the PDCA cycle. C is the Check stage, which refers to the activity of measuring how effectively the processes being operated according to plan are functioning, and evaluating those results. Option エ 'Measure the effectiveness of the processes and evaluate the results' is exactly this measuring-and-evaluating activity, so it is the correct answer corresponding to C.
ここがポイント
- The meaning of each PDCA stage: Plan (establishing objectives and procedures) then Do (introducing and operating) then Check (measuring and evaluating effectiveness) then Act (improving through corrective and preventive measures).
- ISMS's continual improvement is based on this PDCA, and C = Check is the stage of measuring and evaluating the effectiveness of the operated processes.
用語