(1)
(2)
(3)
(4)
7.1.2
7.1.3
7.2
7.2.1
7.2.2
7.2.3
7.2.4
7.3
7.3.1
7.3.2
Measures when introducing terminals ............................................................. 44
Measures when operating the terminals ........................................................... 44
Measures when terminating the operation of terminals ................................... 44
Measures for the adoption and use of Agency-furnished terminals (only
when used outside of areas requiring control measures) and non-Agencyfurnished terminals that handle confidential information ................................ 45
Server equipment ..................................................................................................... 45
(1) Measures when implementing server equipment ............................................. 46
(2) Measures when operating the server equipment .............................................. 46
(3) Measures when terminating the operation of server equipment....................... 47
Multifunction devices and equipment for specific purposes .................................... 47
(1) Multifunction devices ...................................................................................... 47
(2) Equipment for specific purposes, including IoT devices ................................. 48
E-mail, Web, and others ........................................................................................... 48
E-mail....................................................................................................................... 48
(1) Measures when introducing e-mail services .................................................... 48
Web .......................................................................................................................... 48
(1) Measures when introducing and operating webservers.................................... 48
(2) Measures when developing and operating web applications ........................... 49
Domain Name Systems ............................................................................................ 49
(1) Measures when introducing the DNS .............................................................. 49
(2) Measures when operating the DNS .................................................................. 50
Database ................................................................................................................... 50
(1) Measures when implementing or operating the database................................. 50
Communication Lines .............................................................................................. 51
Communication lines ............................................................................................... 51
(1) Measures when installing communication lines............................................... 51
(2) Measures when operating communication lines .............................................. 52
(3) Measures when terminating the operation of communication lines ................. 52
(4) Measures when introducing remote access environments ............................... 53
(5) Measures when introducing wireless LAN environments ............................... 53
IPv6 communication lines ........................................................................................ 53
(1) Measures related to information systems with IPv6 communications ............. 53
(2) Control and monitor for unintended IPv6 communications ............................. 54
Chapter 8 Use of Information Systems .................................................................................. 54
8.1
Use of Information Systems ..................................................................................... 54
8.1.1 Use of information systems...................................................................................... 54
(1) Establishment/maintenance of provisions related to the use of information
systems ............................................................................................................. 54
(2) Measures to encourage information systems users to comply with the
provisions ......................................................................................................... 55
(3) Basic measures for the use of information systems ......................................... 55
(4) Measures when using e-mail and web ............................................................. 56
(5) Handling of identification codes and user/entity authentication information .. 57
(6) Measures for the use of encryption and digital signatures ............................... 57
(7) Prevention of malware infection ...................................................................... 57
8.2
Use of non-Agency-furnished terminals .................................................................. 58
8.2.1 Use of non-Agency-furnished terminals .................................................................. 58
(1) Determining the advisability of using non-Agency-furnished terminals ......... 58
(2) Establishment and management of provisions for the use of non-Agencyfurnished terminals ........................................................................................... 58
(3) Measures for the use of non-Agency-furnished terminals ............................... 58
Table of Contents - 4