問49
頻出度★★★
IT ガバナンスの説明として, 最も適切なものはどれか。
平成29年度 春期 ITパスポート試験 問49
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 49
Incorrectア
This describes efforts to improve compliance (adherence to laws and regulations), which is only one element of compliance management or internal control. It differs from the essence of IT governance, which aims to achieve management objectives through formulating and controlling an IT strategy.
- イ
正解 IT governance is the organizational mechanism by which an enterprise formulates an information systems strategy (IT strategy) to achieve its management objectives and appropriately directs and controls the execution of that strategy. Its essence is guiding and controlling the use of IT from a management (governance) perspective. Choice イ — formulating an information systems strategy to achieve management objectives and controlling the execution of that strategy — expresses exactly this definition, so it is correct.
Incorrectウ
This describes a method for managing risks related to information technology (IT risk management). Risk management is one element that supports IT governance, but it is not the definition that captures the overall picture of formulating an IT strategy and controlling its execution to achieve management objectives.
Incorrectエ
This describes an organization's project management capability in information systems development, close to the development maturity and capability that models such as CMMI assess. It is the ability to run individual development projects, and its scope differs from IT governance, which controls IT strategy at the management level.
ここがポイント
- IT governance = the organizational mechanism that formulates an information systems strategy to achieve management objectives and directs and controls its execution. The core is that management is the driver that controls IT.
- Distinguishing similar terms: compliance (adherence to laws), IT risk management (a risk-management method), and project management capability (development operations ability) are each only a part of IT governance or a separate concept, not synonyms.
用語