令和6年度 ITパスポート試験問82

This question's explanation and your answers so far.

問82

頻出度★★★

ISMS クラウドセキュリティ認証に関する記述として, 適切なものはどれか。

出典　令和6年度 ITパスポート試験問82

解説

問 82

Incorrectア
A mechanism that lets you use multiple cloud services or systems with a single authentication describes “single sign-on (SSO)”, which has nothing to do with ISMS Cloud Security Certification.
イ
正解 ISMS Cloud Security Certification is an add-on scheme that, in addition to certification of an information security management system (ISMS, ISO/IEC 27001), certifies that controls specific to cloud services are being implemented, based on ISO/IEC 27017 which defines such cloud-specific controls. Therefore, choice イ, which describes it as “a certification scheme that certifies that controls specific to cloud services are being implemented for a cloud service”, is the correct statement.
Incorrectウ
A scheme that evaluates an appropriate framework for protecting personal information and grants permission to use a mark describes the “Privacy Mark (P-Mark)” scheme. Its target is personal information protection, which differs from ISMS Cloud Security Certification, which certifies cloud-specific controls.
Incorrectエ
A mechanism that analyzes the situation from the environment, IP address, and so on at login and requires additional authentication when the risk is high describes “risk-based authentication (adaptive authentication)”, and cannot be the answer to this question, which asks about a certification scheme.

ここがポイント

ISMS Cloud Security Certification is an add-on scheme based on ISO/IEC 27017 that, on top of ISMS (ISO/IEC 27001) certification, certifies the implementation of controls specific to cloud services.
Distinguish it from similar terms: single sign-on (SSO), Privacy Mark, and risk-based authentication are all separate concepts and should not be confused.

用語

解答問82イ