問49
頻出度★★★
企業において IT ガバナンスを確立させる責任者は誰か。
平成29年度 秋期 ITパスポート試験 問49
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 49
Incorrectア
Shareholders invest in the company, appoint the management, and monitor and evaluate how it is run. They are the party that entrusts management to others, not the executive responsible for establishing and operating IT governance within the company.
- イ
正解 IT governance is an organizational control mechanism by which a company, aiming to establish competitive advantage, guides the formulation and execution of its IT strategy in the proper direction; it forms part of corporate governance. Because it is management (executives) who bear ultimate responsibility for directing the whole company and for the results, the person responsible for establishing IT governance is also 'management (executives)'. Therefore 'イ' is correct.
Incorrectウ
A systems auditor's role is to independently inspect and evaluate whether IT is properly controlled and operated, and to give advice. The auditor is the party that 'checks' the established controls, not the party that 'establishes' governance, so they are not the responsible person.
Incorrectエ
The head of the systems department is the on-site person in charge of the day-to-day operation of IT and the management of individual systems, carrying out work under the policies set by management. They are not the person with ultimate responsibility for establishing company-wide IT governance.
ここがポイント
- IT governance = a company's organizational capability to formulate and execute its IT strategy and guide it in the proper direction in order to establish competitive advantage. It is part of corporate governance, and ultimate responsibility for establishing it lies with management.
- The key point is to distinguish the different roles: management (establishing and setting direction) / head of the systems department (practical operation) / systems auditor (independent inspection and evaluation) / shareholders (investment and monitoring).
用語