IPA IP 2024 Question 2
A question IPA Japan published in 令和6年度 ITパスポート試験 公開問題 問2, translated into English. ITPEC is based on the same exams.
Which of the following is the law that establishes basic principles for systematically taking defensive measures across the entire nation against acts such as illegally intruding into an information system and stopping services to cause social disruption, and clarifies the responsibilities of the national government and others?
Explanation
Basic Act on Cybersecurity — the Japanese law that sets basic principles for systematic, nationwide defence against cyber attacks and states the responsibilities of the national government.
The Act (2014) defines cybersecurity, sets out the basic principles of policy, and states the responsibilities of the national government, local governments, critical infrastructure operators and others. On that basis the government draws up a national cybersecurity strategy, promoted by a headquarters in the Cabinet. It is a framework law: it does not itself prohibit or punish intrusions.
Answer (b)
Why not others:
- •(a) Whistleblower Protection Act — protects workers who report legal violations in their organization from dismissal or other disadvantageous treatment
- •(c) Act on the Prohibition of Unauthorized Computer Access — prohibits and punishes specific acts, such as logging in with another person's ID and password without permission; it sets no national principles or responsibilities
- •(d) Provider Liability Limitation Act — limits the liability of service providers for damage caused by information posted through their services, and lets a victim demand disclosure of the sender's identity
Key rule: A basic act sets principles, responsibilities and a framework for policy; specific prohibitions and penalties are in separate laws such as the unauthorized access law.
Legal Affairs · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.