自社の情報システムに関して,BCP(事業継続計画)に基づいて,マネジメントの視点から行う活動a~dのうち,適切なものだけを全て挙げたものはどれか。 a 重要データのバックアップを定期的に取得する。 b 非常時用の発電機と燃料を確保する。 c 複数の通信網を確保する。 d 復旧手順の訓練を実施する。
令和3年度 ITパスポート試験 問52
This question's explanation and your answers so far.
問 52
Incorrectア
a, b, and c are correct, but d (drills for recovery procedures), which is also an appropriate activity, is missing. Drills verify whether the recovery plan that was drawn up actually works and improve the ability to respond in an emergency; they are an important BCP activity, so excluding them is wrong.
- イ
正解 The correct answer is イ (a, b, c, d). A BCP (Business Continuity Plan) is a plan prepared in normal times so that, even when an emergency such as a disaster, system failure, or large-scale power outage occurs, critical business operations are not stopped or can be restored quickly; from a management perspective, it identifies the necessary resources and risks and puts countermeasures in place. Items a through d all relate directly to such preparations. a = If you regularly back up critical data, you can restore it even if the data is corrupted or lost. b = If you secure an emergency generator and fuel, you can keep the information system running even during a power outage. c = If you secure multiple communication networks, you can keep communicating via another route even if one goes down. d = If you conduct drills for recovery procedures, you can recover quickly according to the procedures when the time comes, so the plan does not remain merely a paper plan. Since all four are appropriate, イ, which lists all of them, is the correct answer.
Incorrectウ
With only a and d, the appropriate items b (securing an emergency generator and fuel) and c (securing multiple communication networks) are missing. Countermeasures against power and communication outages are also indispensable preparations for business continuity, so excluding them is wrong.
Incorrectエ
b, c, and d are correct, but a (regularly backing up critical data), which is appropriate, is missing. Backups that prepare for data loss and corruption are fundamental to business continuity, so excluding them is wrong.
- A BCP (Business Continuity Plan) is a plan that, in order to continue or quickly restore critical business operations even during emergencies such as disasters or failures, prepares resource provisioning, alternative means, recovery procedures, and drills for them in advance during normal times.
- Data backups, emergency power (generators and fuel), redundancy of communication networks, and recovery drills are all typical BCP/BCM countermeasures; if even one of them is missing, the preparation for business continuity becomes inadequate.