IPA IP 2026 Question 21
A question IPA Japan published in 令和8年度 ITパスポート試験 公開問題 問21, translated into English. ITPEC is based on the same exams.
Which of the following explains the legislative purpose of the Basic Act on Cybersecurity?
Explanation
Basic principles for defence against intrusions over networks, the responsibilities of the national and local governments, and comprehensive promotion of the measures — the Basic Act on Cybersecurity is Japan's framework law for cybersecurity policy, not a penal or regulatory law.
The Act (2014) sets out the basic principles of cybersecurity policy and the responsibilities of the national government, local governments, critical infrastructure operators and others. On that basis it provides for a national cybersecurity strategy and a headquarters in the Cabinet, so that the measures are promoted comprehensively and effectively. It does not itself prohibit or punish any act.
Answer (c)
Why not others:
- •(a) — defining unauthorized access, prohibiting it and setting penalties is the Act on the Prohibition of Unauthorized Computer Access
- •(b) — practical norms for implementing and operating information security controls are a code of practice, ISO/IEC 27002 (JIS Q 27002 in Japan), a standard rather than a law
- •(d) — regulating the circumvention of technological restriction measures that stop digital content from being copied, to protect business interests, is the Unfair Competition Prevention Act
Key rule: A basic act sets principles, responsibilities and a framework for policy; the specific prohibitions and penalties live in separate laws such as the unauthorized access law.
Legal Affairs · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.