問21
頻出度★★★
サイバーセキュリティ基本法の立法趣旨を説明したものはどれか。
令和8年度 ITパスポート試験 問21
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 21
Incorrectア
“Defining and prohibiting unauthorized access to computers, as well as setting penalties” is the intent of the Unauthorized Access Prohibition Act. It is an enforcement-type law backed by penalties, and differs in nature from a basic act, which establishes basic principles and defines the responsibilities of the national and local governments.
Incorrectイ
“A practical code for establishing and operating appropriate information security controls” describes control standards such as JIS Q 27002, the code of practice for ISMS. This is not the legislative intent of a law, but rather a practical standard that enterprises follow when carrying out their security measures.
- ウ
正解 The correct answer is ウ. The Cybersecurity Basic Act is a “basic act” (kihon-ho): rather than cracking down on specific acts or imposing penalties, it lays down the overall framework that forms the foundation of the nation’s policy measures. Choice ウ shows exactly this structure, stating that, regarding defensive measures against acts such as unauthorized intrusion into computers via information and communication networks, it “establishes basic principles,” “clarifies the responsibilities of the national and local governments,” and “promotes such measures comprehensively and effectively.” This three-part set — spelling out basic principles, defining the responsibilities of the national and local governments, and promoting measures comprehensively — is exactly the legislative intent typical of a basic act, and it coincides with the very purpose of the Cybersecurity Basic Act.
Incorrectエ
“Regulating acts such as circumventing the technical protection measures that prevent copying of digital content, in order to secure business interests” is the intent of the Unfair Competition Prevention Act (its provisions on technical protection measures). It targets the circumvention of copy protection for copyrighted works, and is unrelated to the framework of cybersecurity policy measures.
ここがポイント
- Grasp that a basic act is a law that lays down a framework — not specific enforcement or penalties, but rather basic principles, the responsibilities of the national and local governments, and the comprehensive promotion of policy measures.
- Be able to distinguish the differing intents of the Cybersecurity Basic Act, the Unauthorized Access Prohibition Act, the Unfair Competition Prevention Act, and the ISMS code of practice (JIS Q 27002).
用語