Results of measures against opinions in the field survey report (FY2015)

Last updated on July 30, 2024.

The full text of the field survey report can be found on the report list page.

Results of measures against the opinion of the on-site survey report on personal information handling affairs in 2015

Overview of the field survey
Survey date	Thursday, July 16, 2015
Survey target	Management and operation of core systems in Yokohama City
Jurisdiction Division	General Affairs Bureau Resident System Division

[Opinions (things seeking improvement)]

A. Northern Data Center

(a) Connection measures for USB ports
Meaning See	In the event of a large amount of personal information leakage accident at a private business operator discovered in 2014, a USB port was used as a means of extracting information. It was also said that this center is gradually taking measures to block the USB port with a terminal for data exporting. However, more than a year has passed since the accident described, and we would like to work to complete the countermeasures as soon as possible.
Measures Results	Measures were completed in December 2015 for terminals in the Northern Data Center.

A. Northern Data Center

(b) Recording of storage and shipping of storage media
Meaning See	In this center, the extracted information is exported to DVDs, etc. based on instructions from the maintenance center. This method, as described in (3) Opinion (evaluation) a (b), can be evaluated at lower risk than sending data over the Internet line, but troubles regarding the storage and shipping status of storage media Please keep a record in preparation.
Measures Results	From August 2015, DVDs to be used as storage media will be recorded by the management book each time they are accepted and paid out (take out the stored DVD from the shelf for actual use), discarded, etc. I tried to grasp the storage status. At the same time, the transportation status of processed DVDs etc. is described in the operation instructions and the performance status has been checked so that it can be confirmed when, where and what was shipped.

B. Maintenance center

Admission and exit management of contractors to city staff offices
Meaning See	Regarding the entrance and exit of the contractor to the city staff office, there were no restrictions on the range of regular working hours of city staff for meetings and emergencies. During this time zone, city officials are always working, and it is recognized that it is unlikely that fraud will be performed by the contractor, but the office of city officials is confidential to the outside It is assumed that there is a considerable amount of information to be done. Please take measures such as restricting entrance and exit during times when city officials are scarce, such as lunch breaks, and giving due consideration to confidential information when conducting meetings.
Measures Results	Regarding the permission of the contractor who lends the entrance / exit management card to the city staff office, in addition to the current entry time limit, entry by card is also restricted during lunch breaks (12:00 to 13:00). To do. (It has been coordinated with the facility manager to change the entrance and exit management system from April 2016.) In addition, from August 2015, we decided not to hold meetings with businesses etc. in the city staff office. .

[Proposal items]

A. Northern Data Center

About the work status of the resident contractors
Meaning See	At this center, workers of contractors are stationed, and shifts (who works when) are determined according to busy work, and the city does not know about this shift. It was a situation. However, in preparation for a large-scale trouble, data is exported to achieve a deterrent effect based on grasping when and how many people are working and being a contractor with specialized knowledge. Please consider installing a surveillance camera on the terminal.
Measures Results	Regarding the shift grasp of the contractors at the Northern Data Center, a shift table will be submitted in advance every month from April 2016. In addition, we will consider installing surveillance cameras on terminals, including introducing a new face recognition mechanism for terminals.

B. Maintenance center

Safety management of face recognition terminals and terminals connected to the Northern Data Center
Meaning See	Regarding face recognition terminals, as described in (3) Opinion (Evaluation) (c), efforts are being made to centralize terminals that can access personal information and enhance security, and that point can be evaluated. I can. However, along with the terminal connected to the northern data center, if you are a city official with administrative authority, it is technically possible to use illegally, and there is no risk of impersonating exploiting the administrative authority. Considering that there is no such thing, and that it will eliminate certain deterrence and public anxiety, measures such as installing surveillance cameras should be considered.
Measures Results	Currently, we are considering using video-based tools such as video conferences for business purposes, and as part of this, we will consider introducing surveillance cameras.

Civic Affairs Bureau Citizen Information Room Citizen Information Division

Phone: 045-671-3883

Fax: 045-664-7201

Page ID: 782-625-483