IPA IP 2023 Question 61
A question IPA Japan published in 令和5年度 ITパスポート試験 公開問題 問61, translated into English. ITPEC is based on the same exams.
What is a measure called that is regarded as a basic principle in the design, construction, and operation of IoT systems and other such systems, and ensures information security from the planning and design stages of the system?
Explanation
Security by design — building information security into a system from its planning and design stages, rather than adding it after the system is built.
Security added late is costly and often incomplete: a flaw found in operation may need the design itself changed. Security by design treats security as a requirement from the start, so threats are analysed and countermeasures are designed in at the planning and design stages and carried through construction and operation. It is stressed for IoT systems, whose many devices are hard to fix once shipped and in use.
Answer (b)
Why not others:
- •(a) Secure boot — a technology that verifies the digital signature of the OS or firmware at start-up and runs it only if the check passes; one countermeasure, not a design principle
- •(c) Universal design — designing products and environments so that as many people as possible can use them, regardless of age or ability; it concerns usability, not security
- •(d) Reboot — restarting a computer or device
Key rule: Security by design means security is planned in from the first stage of a system; privacy by design is the same idea applied to personal data.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.