問34
頻出度★★★
企業におけるガバナンスには, ITガバナンスとコーポレートガバナンスなどがある。ITガバナンスの位置付けとして適切な説明はどれか。
平成26年度 秋期 ITパスポート試験 問34
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 34
Incorrectア
Incorrect. The two are not the same concept. Corporate governance is a broad framework covering company management as a whole (the functioning of the board of directors, transparency of management, compliance, risk management, and so on), whereas IT governance is a narrower concept covering the IT domain within it. Because their scopes differ, they cannot be called “the same.”
Incorrectイ
Incorrect. The two are not in opposition. IT governance supports the aims of corporate governance (achieving business goals and ensuring soundness) from the IT side, so their directions are aligned. Explaining them as mutually conflicting concepts does not hold.
Incorrectウ
Incorrect. The containment relationship is reversed. Correctly stated, IT governance is one of the components of corporate governance: control of IT is contained within the higher-level framework of corporate governance. Corporate governance as a whole is not contained within IT governance.
- エ
正解 The correct answer is エ. Corporate governance refers to the whole set of mechanisms that monitor and control management so that a company runs its business soundly and transparently for stakeholders such as shareholders, customers, and society. IT governance, on the other hand, is the activity within that framework of controlling information systems, IT investment, and the use of IT so that they are operated appropriately in line with business goals; Japan's Ministry of Economy, Trade and Industry likewise defines it as “the organizational capability to control the formulation and execution of an IT strategy and guide it in the direction it should take, in order for the company to build competitive advantage.” Corporate activity today depends on IT in every respect — operations, accounting, and internal control alike — so if IT is not controlled, corporate governance itself cannot stand. In other words, IT governance forms a part of corporate governance and is an element that cannot be dispensed with, so エ, which states this positioning correctly, is appropriate.
ここがポイント
- Understand the containment relationship: corporate governance (governance of the whole company = the whole) ⊃ IT governance (control of the IT domain = a part). Options that reverse which is the higher level and which is the lower level are a standard trap.
- Definition of IT governance: the organizational capability to control the formulation and execution of an IT strategy and guide IT in the direction it should take in line with business goals. Together with IT controls within internal control, it is positioned as an indispensable element that supports corporate governance.
用語