ISO/IEC 19944-1:2020 クラウドコンピューティングと分散プラットフォーム─データフロー、データカテゴリ、データ使用—パート1：基本 | ページ 6

3.1.1

アカウントデータ

クラウド サービスを管理するために必要な各 CSC に固有のデータのクラス

注記 1:通常、アカウント データは、クラウド サービスが購入され、CSP の管理下にあるときに生成されます。

注記 2:アカウント データは、名前、住所、電話番号など、CSC によって提供されるデータ要素で構成されます。

3.1.2

エンドユーザーを特定できる情報

EUⅡ

ユーザーによるサービスの使用から取得または生成される、ユーザーに関連付けられた派生データ

3.2.1

device

physical entity that communicates directly or indirectly with one or more cloud services

3.2.2

application marketplace

set of cloud services providing a digital marketplace intended to offer applications and other digital content for a particular device platform (3.2.4) allowing users to browse and download applications and other content

Note 1 to entry: An application marketplace may be offered to the public, or to private groups such as a corporate environment.

Note 2 to entry: A device (3.2.1) can use more than one application marketplace.

3.2.3

application cloud service

cloud service that supports applications running on a given device (3.2.1) , where the cloud service is provided by a party other than the device platform provider (3.2.5)

3.2.4

device platform

operating system and related feature set that provides the core capabilities for a device (3.2.1)

Note 1 to entry:an application marketplace (3.2.2) is specific to a device platform.

3.2.5

device platform provider

device platform cloud service provider

cloud service provider that provides cloud services necessary to support a device platform (3.2.4) including managing needed digital identities

Note 1 to entry: The cloud service provider that offers the application marketplace (3.2.2) is typically the same as the device platform provider, but it is not required to be.

3.2.6

device platform cloud service

cloud service offered by the device platform provider (3.2.5) to support the device platform (3.2.4)

Note 1 to entry:an application marketplace (3.2.2) can be an example of device platform cloud service.

3.3.1

personally identifiable information

PII

personal data

any information that (a) can be used to establish a link between the information and the natural person to whom such information relates, or (b) is or can be directly or indirectly linked to a natural person

Note 1 to entry: The “natural person” in the definition is the PII principal (3.3.3). To determine whether a PII principal is identifiable, account should be taken of all the means which can reasonably be used by the privacy stakeholder holding the data, or by any other party, to establish the link between the set of PII and the natural person.

Note 2 to entry: This definition is included to define the term PII as used in this document. A public cloud PII processor (3.3.2) is typically not in a position to know explicitly whether information it processes falls into any specified category unless this is made transparent by the cloud service customer.

[SOURCE: ISO/IEC 29100:2011/Amd1:2018, 2.9]

3.3.2

PII controller

privacy stakeholder (or privacy stakeholders) that determines the purposes and means for processing personally identifiable information (PII) (3.3.1) other than natural persons who use data for personal purposes

Note 1 to entry: A PII controller sometimes instructs others, e.g. PII processors (3.3.4) to process PII on its behalf while the responsibility for the processing remains with the PII controller.

[SOURCE: ISO/IEC 29100:2011, 2.10]

3.3.3

PII principal

natural person to whom the personally identifiable information (PII) (3.3.1) relates

Note 1 to entry: Depending on the jurisdiction and the particular PII protection and privacy legislation, the synonym “data subject” can also be used instead of the term “PII principal”.

[SOURCE: ISO/IEC 29100:2011, 2.11]

3.3.4

PII processor

privacy stakeholder that processes personally identifiable information (PII) (3.3.1) on behalf of and in accordance with the instructions of a PII controller (3.3.2)

[SOURCE: ISO/IEC 29100:2011, 2.12]

3.4.1

individual data

class of data objects under the control, by legal or other reasons, of a natural person

Note 1 to entry: Individual data can be a mixed dataset (3.4.6).

Note 2 to entry: Customer content data is individual data when the CSC is a natural person.

3.4.2

organizational data

class of data objects under the control, by legal, contractual or other reasons, of an organization

Note 1 to entry: An organization can be a for-profit company, a non-profit organization, a public or government agency, a non-governmental organization or an international organization, and can be small, medium or large.

Note 2 to entry: Customer content organizational data when the CSC is an organization and thus not a natural person.

Note 3 to entry: Cloud service provider data (ISO/IEC 17788) is always organizational data by nature.

Note 4 to entry: Organizational data can be a mixed dataset (3.4.6) .

3.4.3

organizational protected data

OPD

organizational data whose protection is required based on the policies established by governance of data process

Note 1 to entry: Organizations have policies that govern the data under their control. ISO/IEC 38505-1 identifies and examines higher level governance concerns regarding the use of data which is relevant from the perspective of governance of data.

Note 2 to entry: Organizational data can contain OPD and PII.

3.4.4

public domain data

class of data objects over which nobody holds or can hold copyright or other intellectual property

Note 1 to entry: Data can be in the public domain in some jurisdictions, while not in others.

Note 2 to entry: The concept of public domain and the difference between this and"publicly available" is subtle and varies between jurisdictions. Readers should make themselves aware of the specific legal situation as it may apply to them.

3.4.5

non-personal data

class of data objects that does not contain PII (3.3.1)

Note 1 to entry: data objects that were originally PII and were later made anonymous are non-personal data.

3.4.6

mixed dataset

set of data objects that contain both PII (3.3.1) and non-personal data (3.4.5)

3.4.7

data principal

entity to which data relates

Note 1 to entry: The term “data principal” is broader than “PII principal” (or “data subject” as used elsewhere) and is able to denote any entity such as a person, an organization, a device, or a software application.

[SOURCE: ISO/IEC 20889:2018, 3.4]

3.5.1

artificial intelligence

<system> capability of an engineered system to acquire, process and apply knowledge and skills

Note 1 to entry: knowledge are facts, information, and skills acquired through experience or education.

[SOURCE: ISO/IEC CD 22989 ² ]

3.5.2

artificial intelligence

<engineering discipline>discipline which studies the engineering of systems with the capability to acquire, process and apply knowledge and skills

Note 1 to entry: knowledge are facts, information, and skills acquired through experience or education.

[SOURCE: ISO/IEC CD 22989]

3.5.3

artificial intelligence system

AI system

system using AI

[SOURCE: ISO/IEC CD 22989]

3.5.4

machine learning

ml

process using computational techniques to enable systems to learn from data or experience

[SOURCE: ISO/IEC CD 23053 ³ ]

3.5.5

machine learning model

mathematical construct that generates an inference, or prediction, based on input data

Note 1 to entry: for supervised learning, a machine learning model results from the training or a machine learning algorithm

Note 2 to entry: for example, if a univariate linear function (y = w0 + w1(x)) has been trained using linear regression, the resulting model could be y = 3 + 7(x).

[SOURCE: ISO/IEC CD 23053]

3.5.6

model training

<machine learning> task of determining optimal model parameters from a given dataset

[SOURCE: ISO/IEC CD 23053]

3.5.7

trained model

result of model training

[SOURCE: ISO/IEC CD 23053]

3.5.8

training data

samples used to fit a machine learning model

[SOURCE: ISO/IEC CD 23053]

3.6.1

lifecycle

evolution of a system, product, service, project or other human-made entity, from conception through retirement

[SOURCE: ISO/IEC 29110-4-3:2018, 3.15]

3.6.2

transparency

open, comprehensive and understandable presentation of information

[SOURCE: ISO 21931-2:2019, 3.33]