Abstract

Information security incidents involving internal improprieties that threaten the very business of
Japanese organizations have drawn attention. Internal improprieties are one of problems to be solved
in Japanese organizations. However, it is difficult to share information about internal impropriety in-
cidents and to consider the causes of and effective countermeasures for internal improprieties among
Japanese organizations. Each organization enacts countermeasures based on its own experience, and
most these countermeasures of Japanese organizations are insufficient. Thus, Information-technology
Promotion Agency, Japan (IPA) created “Guidelines for the Prevention of Internal Improprieties in
Organizations” which provides exhaustive countermeasure. This paper describes summary of these
guidelines, and explains problems which are how to collect information and workplace environment
to be hard to commit internal improprieties, and solutions of the problems.