Results of Measures against the opinion of the field survey report (FY2015)

Last Updated January 21, 2019

The full text of the field survey report can be found on the report list page.

Measures results for the opinion of the field survey report on personal information handling affairs in 2015

Outline of field survey
Survey date	Thursday, July 16, 2015
Survey target	Management and operation of core systems in Yokohama City
Jurisdiction Division	General Affairs Bureau Resident System Division

[Opinions (request for improvement)]

A. Northern Data Center

(a) Measures for USB port connection
I mean See	In the event of a large amount of personal information leakage accident by a private business operator discovered in FY2014, USB ports were used as a means of retrieving information. In this center, it is said that measures are gradually taking measures to block the USB port with data export terminals. However, more than a year has passed since the accident described above, and we would like to work to complete the countermeasures as soon as possible.
Measures Results	Measures were completed for the terminal of the Northern Data Center in December 2015.

A. Northern Data Center

(b) Storage and shipment records of storage media
I mean See	In this center, based on instructions from the maintenance center, the extracted information is exported to DVDs, etc. This method can be evaluated at a lower risk than sending data over the Internet line, as described in (3) Opinion (Evaluation) a (b), but the storage and shipping status of storage media, troubles etc. I want to keep a record in preparation for
Measures Results	From August 2015, DVDs used as storage media will be recorded each time it is accepted and paid out (removing the stored DVD from the shelf for actual use), disposal, etc., using the management book. I tried to grasp the storage situation. At the same time, the transport status of processed DVDs, etc. was described in the operation instructions and the status of implementation was checked, so that it was improved so that when, where and what was shipped.

I. Maintenance center

Entrance and exit management of outsourcing companies to city staff office
I mean See	Regarding the entry and exit of the contractor to the city staff office, there were no restrictions as long as the regular working hours of city officials due to meetings and emergency response. During this time, city officials are always working and it is recognized that it is unlikely that fraud by the contractor will be performed, but the office of the city staff should be confidential to the outside. It is assumed that there will be considerable information. Please take measures such as restricting entry and exit during times when city officials are scarce, such as during lunch breaks, and to give due consideration to confidential information when conducting meetings.
Measures Results	Regarding the permission to enter the city staff office of the contractor who lends the entry / exit management card, in addition to the current entry limit time, the use of the card is also restricted during the lunch break time zone (12:00 to 13:00) To do (Adjusted with the facility manager to change the entry and exit management system from April 2016.) In addition, from August 2015, we decided not to hold meetings with companies in the city staff office.

[Proposals]

A. Northern Data Center

About the work situation of the contracted company
I mean See	At this center, workers of the contractor are stationed, and shifts (who will work when) is determined according to the busyness of work, and the city does not know about this shift. It was a situation. However, in preparation for a large-scale trouble, grasping when and how many people are working in preparation for a large-scale trouble occurs, and considering that it is a contractor with specialized knowledge. Please consider installing a surveillance camera in the city.
Measures Results	Regarding the shift of contractors in the Northern Data Center, a shift table will be submitted in advance every month from April 2016. In addition, we will consider the installation of surveillance cameras on terminals, including the introduction of a new face authentication mechanism in the terminal.

I. Maintenance center

Safety management of facial recognition terminals and terminals connected to the Northern Data Center
I mean See	Regarding facial recognition terminals, as described in (3) Opinion (Evaluating) a (c), we are trying to centralize terminals that can access personal information and try to improve security. . However, as long as the terminal connected to the northern data center, it is technically possible to use unauthorized use, and there is no risk of spoofing by exploiting the administrative authority, and there is no risk of spoofing by exploiting the administrative authority. In consideration of the fact that certain deterrent and the anxiety of citizens, please consider measures such as installing surveillance cameras.
Measures Results	Currently, we are considering using video-based tools such as video conferences, for business purposes, and as part of this, we will consider introducing surveillance cameras.

Civic Affairs Bureau Citizen Information Office, Citizen Information Section

Phone: 045-671-3883

Fax: 045-664-7201

Page ID: 782-625-483