問89
頻出度★★★
PDCA モデルに基づいて ISMS を運用している組織の活動において, PDCA モデルの A (Act) に相当するプロセスで実施するものとして, 適切なものはどれか。
令和2年度 ITパスポート試験 問89
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 89
- ア
正解 A (Act) of the PDCA cycle is the stage where you carry out “corrective action and improvement” in response to problems found in C (Check). In an ISMS, the process of deciding on reviews and improvement measures for the deficiencies revealed by monitoring the operational status and measuring and evaluating the operational results (= Check) corresponds to this stage. Choice ア states exactly this, namely deciding on reviews and improvement measures based on the revealed deficiencies, which matches the content of Act that is responsible for continual improvement, so it is correct.
Incorrectイ
“Monitor the operational status and measure and evaluate the operational results” is the stage of checking and evaluating whether the operational results are as planned, corresponding to C (Check) of PDCA. It is not Act but an activity in the stage preceding Act, so it is wrong.
Incorrectウ
“Formulating the security policy, establishing the internal organizational structure, and developing procedures for achieving the goals” is the stage of deciding what to do and how, corresponding to P (Plan) of PDCA. It is not Act, so it is wrong.
Incorrectエ
“Carrying out thorough dissemination of the security policy, introduction of security devices, and so on, and operating it concretely” is the stage of executing and operating measures according to the plan, corresponding to D (Do) of PDCA. It is not Act, so it is wrong.
ここがポイント
- The correspondence between each stage of the PDCA cycle and ISMS operation: Plan = formulating the policy, structure, and procedures; Do = concrete operation such as dissemination and device introduction; Check = monitoring, measurement, and evaluation; Act = corrective action and improvement.
- Keep in mind that A (Act) is the “continual improvement” stage where reviews and improvement measures are decided based on the deficiencies identified in Check.
用語