問46
頻出度★★★
システム監査に当たるものはどれか。
平成29年度 春期 ITパスポート試験 問46
マネジメント系システム監査 › システム監査
This question's explanation and your answers so far.
解説
問 46
Incorrectア
This is a daily inspection performed by the operations manager of the audited system, that is, work done by the audited department itself, so it lacks independence. It is part of operations management, not a systems audit.
Incorrectイ
This is a self-inspection performed by the operations staff of the audited system themselves; they merely check their own work, so it lacks independence and objectivity. It does not constitute a systems audit.
Incorrectウ
A satisfaction evaluation by users is a survey that measures the system's usability and user satisfaction; it is not a systems audit that verifies the appropriateness of controls from an independent standpoint.
- エ
正解 The most important requirement for a systems audit is independence: the evaluation must be performed by an objective third party who is not involved in operating or using the information system under audit. In choice エ, the internal audit department, which is independent of the operations division of the audited system, performs the evaluation, so it satisfies independence and objectivity and qualifies as a systems audit. Therefore the correct answer is エ.
ここがポイント
- The essence of a systems audit is that an objective evaluation is carried out by a third party independent of the operation and use of the audited object (such as an internal audit department), which is distinct from the audited department's own self-inspection or daily inspection.
- Independence and objectivity are the essential requirements of a systems audit; judge each choice by whether its actor is independent from the object being audited.
用語