問2
頻出度★★★
情報システムに不正に侵入し, サービスを停止させて社会的混乱を生じさせるような行為に対して, 国全体で体系的に防御施策を講じるための基本理念を定め, 国の責務などを明らかにした法律はどれか。
令和6年度 ITパスポート試験 問2
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 2
Incorrectア
The Whistleblower Protection Act is a law that protects workers (whistleblowers) who report legal violations within their organization from being dismissed or otherwise treated unfavorably; it has nothing to do with the State’s defensive measures or basic philosophy against cyber-attacks.
- イ
正解 The correct answer is “イ Cybersecurity Basic Act.” The wording in the question, “establishes the basic philosophy for taking systematic defensive measures nationwide” and “clarifies the responsibilities of the State and so on,” captures exactly the character of this law. The Cybersecurity Basic Act is a “basic act” that, so that the State can deal comprehensively and systematically with cyber-attack threats such as unauthorized intrusion into information systems and the halting of services, sets out a basic philosophy and defines the responsibilities of the State, local governments, businesses, and so on, as well as the basic policy for its measures. The point that it is not a penal law that cracks down on individual acts but a framework law that establishes nationwide policy and structure matches the question’s description perfectly.
Incorrectウ
The Unauthorized Access Prohibition Act is a law (a regulatory, enforcement-type law) that prohibits unauthorized-access acts themselves, such as using another person’s ID or password without permission, and imposes penalties on them. It is a law that punishes individual illegal acts, not one that sets out a “basic philosophy” or the “responsibilities of the State” to present a framework of systematic nationwide defensive measures.
Incorrectエ
The Provider Liability Limitation Act is a law that, when defamation or rights infringement occurs on the internet, defines the scope of a provider’s liability for damages and the request for disclosure of sender information; its purpose differs from the State’s basic philosophy or defensive measures against cyber-attacks.
ここがポイント
- Distinguish between a “basic act” (a framework law that sets out a basic philosophy and the responsibilities of the State) and an “enforcement law” (a law that prohibits individual acts and imposes penalties). The keywords “basic philosophy” and “responsibilities of the State” in the question are typical features of a basic act.
- Grasp the difference in their roles: the Cybersecurity Basic Act is a law that sets out the basic policy for the State to deal comprehensively and systematically with cyber-attacks, whereas the Unauthorized Access Prohibition Act is a law that punishes unauthorized-access acts.
用語