Encrypting the prehash code using the sender's private key provides assurance of the authenticity of the message. Mathematically deriving the prehash code provides integrity to the message. Encrypting the prehash code and the message using the secretkey provides confidentiality.

Section: Protection of Information Assets
Explanation:
Although BCP and DRP are often implemented and tested by middle management and end users, the
ultimate responsibility and accountability for the plans remain with executive management, such as the
board of directors.

説明／参考資料：
適切な職務分掌は、品質管理担当者が変更管理や問題管理の責任も担うことを妨げるものではない。