問34
頻出度★★★
IT ガバナンスを説明したものはどれか。
平成24年度 秋期 ITパスポート試験 問34
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 34
Incorrectア
This describes knowledge management. It refers to a management approach in which the tacit knowledge that individual employees have built up through experience is documented and put into databases so as to be converted into explicit knowledge, then shared and reused across the whole organization, thereby raising employees’ skills and creativity and strengthening the company’s competitiveness. Groupware, an in-house wiki, and collections of best practices are typical means of realizing it. It has in common with IT governance that IT is used as a tool, but its aim is the sharing and use of knowledge, not having management control the alignment between business strategy and IT strategy, so it is not a description of IT governance.
- イ
正解 The correct answer is イ. IT governance is the organizational capability by which management takes responsibility for guiding and controlling the formulation and execution of IT strategy so that the company builds competitive advantage, and steers it in the direction it ought to take. Its greatest characteristics are that the actor is the management, not the information systems department, and that the object is not individual system projects but the way the whole company makes use of IT. Choice イ captures exactly this character: its first half, “Rather than evaluating the justification of each individual IT investment”, makes clear that it is not a project-by-project micro-level profitability review, and its second half, “apply a framework for evaluating the alignment between business strategy and IT strategy, investment effectiveness, the form of the organization, and so on”, states that it is a company-wide, ongoing framework for evaluation. What IT governance asks is whether an IT investment really leads to realizing the business strategy (alignment), whether IT investment as a whole produces the expected value (investment effectiveness), whether the structure, authority, and responsibilities for promoting and controlling IT are appropriate (the form of the organization), and whether risks stay within an acceptable range. Applying these as a shared framework rather than as case-by-case judgments, and cycling through plan, do, check, and act, is what IT governance is; therefore イ is the correct description.
Incorrectウ
This describes the balanced scorecard (BSC). It refers to a performance evaluation and strategic management technique in which action items aligned with the strategy (critical success factors) and numerical targets (KPIs) are set from four perspectives — finance, customers, internal business processes, and learning and growth — and are monitored while corporate transformation is driven forward. The name comes from the fact that it does not lean only toward financial indicators but includes non-financial indicators as well, evaluating in a balanced way. In the sense of being a framework that connects strategy with evaluation, its idea is close to IT governance, but its object is performance management of business operations in general and is not limited to controlling IT strategy, so it is wrong as a definition of IT governance.
Incorrectエ
This describes shared services. It refers to a form in which indirect operations that exist in common across several companies within a group — such as human resources, accounting, general affairs, and information systems operation — are separated from each company and concentrated and consolidated into a dedicated organization or subsidiary that is made independent, with each company then receiving services from it. By eliminating duplicated work and standardizing it, the aim is to reduce costs and improve the quality of operations, that is, to make management more efficient. It is an organizational restructuring technique for consolidating the running of operations, not a framework for evaluating and controlling the alignment between business strategy and IT strategy, so it does not amount to a description of IT governance.
ここがポイント
- The definition of IT governance — the organizational capability by which management guides and controls the formulation and execution of IT strategy so that the company builds competitive advantage, and steers it in the direction it ought to take. The focus is not on whether an individual project should be approved, but on company-wide, continuous evaluation of such matters as the alignment between business strategy and IT strategy, the effectiveness of IT investment as a whole, the form of the organization and structure that carries out IT, and risk control.
- Distinguish confusable management techniques by their aim — knowledge management is a technique for strengthening competitiveness by sharing individuals’ knowledge across the organization; the balanced scorecard is a technique for setting KPIs from the four perspectives of finance, customers, internal business processes, and learning and growth and managing how far the strategy has been achieved; shared services is an organizational form that consolidates indirect operations common to several companies in order to improve efficiency. This is a standard set that lines up in four-option questions, so be ready to decide on the spot from the keywords (knowledge sharing / four perspectives / consolidating and making operations independent / alignment between business strategy and IT strategy).
用語