問39
頻出度★★★
企業におけるIT統制に関する次の記述中の a に入れる最も適切な字句はどれか。 企業は，経営戦略に沿って組織体の[ a ]に向けて，効果的なIT戦略を立案し，その戦略に基づき情報システムの企画・開発・運用・保守というライフサイクルを確立している。この情報システムにまつわるリスクを低減するために，IT統制を整備・運用している。
平成27年度 秋期 ITパスポート試験 問39
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 39
- ア
正解 The correct answer is ア “Realization of IT governance”. IT governance refers to an organizational framework that, in alignment with the management strategy, formulates and executes an effective IT strategy and controls the entire lifecycle of information systems — planning, development, operation, and maintenance. The statements in the stem — “in line with the management strategy”, “formulates an effective IT strategy”, “establishes the lifecycle”, and “builds and operates IT control to reduce risks” — describe exactly the process of realizing IT governance. Therefore, as the goal the organization aims for, the most appropriate phrase to fill blank a is “Realization of IT governance”.
Incorrectイ
A system audit is an activity that, from an independent standpoint, inspects and evaluates whether information systems and IT control are appropriately built and operated; it is not the ultimate goal that the IT strategy is “aimed at”. An audit is a means of verifying controls, not the organizational goal itself that connects to the management strategy, so it is inappropriate.
Incorrectウ
Information literacy refers to an individual's ability to appropriately use and make judgments about information and IT. It is a concept concerning the skills of individual employees; as the goal of an organization that formulates and controls an IT strategy company-wide in line with the management strategy, its scope is too narrow and it does not fit the context, so it is inappropriate.
Incorrectエ
Enacting software development standards is merely the establishment of individual rules to improve the quality and productivity of the development process. Compared with the intent of the question — controlling the entire lifecycle of information systems in alignment with the management strategy — it is too local and does not amount to the goal the organization aims for, so it is inappropriate.
ここがポイント
- Grasp the definition of IT governance: a framework that achieves organizational goals by formulating and executing an IT strategy aligned with the management strategy and by controlling the entire lifecycle of information systems.
- Distinguish it from a system audit (a means of inspection and evaluation), information literacy (an individual's ability), and software development standards (individual technical rules), and choose the concept at the level of the whole organization's goal.
用語