問44
頻出度★★★
システム監査に関する説明として, 適切なものはどれか。
平成29年度 秋期 ITパスポート試験 問44
マネジメント系システム監査 › システム監査
This question's explanation and your answers so far.
解説
問 44
Incorrectア
A framework for realizing IT service management describes ITIL, not a systems audit. ITIL is a collection of best practices for service delivery and operation, which differs in role from an audit whose main purpose is verification and evaluation.
- イ
正解 A systems audit is an activity in which an independent auditor verifies and evaluates whether controls over risks related to information systems are appropriately established and operated. Choice イ states exactly this definition, so it is appropriate. The purpose of an audit is to objectively check the reliability, safety, and efficiency of an information system and lead to the improvement of any problems found.
Incorrectウ
Techniques and methods for efficiently developing high-quality software describe software engineering (development techniques), not a systems audit. It is an activity that carries out development itself, not one that verifies the appropriateness of controls.
Incorrectエ
Applying knowledge, skills, tools, and techniques to project activities in order to satisfy the project's requirements describes project management, not a systems audit. It is an activity that plans and carries out a project, which differs from an audit that verifies independently.
ここがポイント
- Systems audit = an activity in which an independent auditor verifies and evaluates the establishment and operation status of controls over information system risks.
- Distinguish confusing similar terms: do not confuse it with ITIL (IT service management), software engineering (development techniques), or project management.
用語