問35
頻出度★★★
ITガバナンスの実現を目的とした活動の事例として, 最も適切なものはどれか。
平成28年度 春期 ITパスポート試験 問35
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 35
Incorrectア
The act of a person who is not in charge modifying the system based on his own judgment is unauthorized work that ignores change-management control, and is in fact the kind of deviant behavior that IT governance seeks to prevent. It is the exact opposite of organizational direction and control, so it is wrong.
- イ
正解 IT governance is a mechanism by which management, in order to raise corporate value, aligns the IT strategy with the management strategy and directs and controls the use of IT across the whole organization. Choice イ starts from the management strategy of “improving business efficiency,” and based on it formulates an IT strategy of using tablet devices so that “the system can be used anywhere,” and further establishes an implementation support structure. This series of activities—organizationally linking the management strategy with IT and putting in place the structure to realize it—is exactly a practical example of IT governance, and is the most appropriate.
Incorrectウ
Fixing servers and PCs in place with earthquake-resistant tape is a physical disaster countermeasure to prepare for earthquakes (facility management and availability measures), and is a measure at the individual operations level. It is not an organizational control activity that aligns the management strategy with IT, so it cannot be called an example of IT governance.
Incorrectエ
A maintenance person’s self-development to enhance project management skills for the sake of his own career path is, after all, merely individual skill improvement and self-cultivation. It is not an activity in which the organization directs and controls IT, so it does not count as an example of IT governance.
ここがポイント
- IT governance is a mechanism by which management aligns the IT strategy with the management strategy to raise corporate value, and directs and controls the use of IT across the whole organization.
- Judge by whether it is an “organization-level, top-down” activity that starts from the management strategy to build an IT strategy and puts in place the structure to realize it. Individual work, physical countermeasures, and self-development do not qualify.
用語