問83
頻出度★★★
ISMS の運用に PDCA モデルを採用している組織において, サーバ監視に関する次の作業を実施する。各作業と PDCA モデルの各フェーズの組合せとして, 適切なものはどれか。 〔作業〕 (1) サーバ監視の具体的な目的及び手順を定める。 (2) サーバ監視の作業内容を第三者が客観的に評価する。 (3) 定められている手順に従ってサーバを監視する。 (4) 発見された問題点の是正処置として, サーバの監視方法を変更する。
令和7年度 ITパスポート試験 問83
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 83
Incorrectア
Setting D to (2) and C to (3) is wrong. (2) “Have a third party objectively evaluate” is not execution but inspection/evaluation (C); (3) “Monitor according to the procedures” is the execution as planned (D). Here D and C are swapped.
Incorrectイ
Setting D to (2), C to (4), and A to (3) is wrong. (2) is inspection/evaluation (C), (4) is the corrective action (A), and (3) is execution (D); all three correspondences are misaligned.
- ウ
正解 PDCA is the cycle Plan → Do → Check (inspection/evaluation) → Act (corrective action/improvement). Matching each task: (1) “Define the objectives and procedures” is planning, so P; (3) “Monitor according to the established procedures” is execution as planned, so D; (2) “Have a third party objectively evaluate” is the inspection/evaluation of the results, so C; (4) “As a corrective action for found problems, change the monitoring method” is the action/improvement based on the evaluation results, so A. Therefore the combination P: (1), D: (3), C: (2), A: (4) is correct, and the answer is ウ.
Incorrectエ
Setting C to (4) and A to (2) is wrong. (4) “Change the monitoring method as a corrective action” is improvement/action (A), and (2) “Objective evaluation by a third party” is inspection/evaluation (C). Here C and A are swapped.
ここがポイント
- Definitions of the four PDCA phases: Plan = planning of objectives/procedures, Do = execution as planned, Check = inspection/evaluation of the implementation results, Act = corrective action/improvement based on the evaluation results.
- Continual improvement of an ISMS is achieved by running the PDCA cycle. Use the keywords “define = P / carry out = D / evaluate = C / correct or change = A” to determine which phase each task belongs to.
用語