問41
頻出度★★★
適切な IT ガバナンスを構築するための役割①～④に関して，それを担う経営者と情報システム部門の責任者の分担の適切な組合せはどれか。 ① IT ガバナンスの方針の明確化 ② 情報化投資の決定における原則の制定 ③ 情報システム部門内における役割分担と権限の決定 ④ プロジェクト計画に基づいたシステム開発の進捗管理
平成30年度 秋期 ITパスポート試験 問41
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 41
- ア
正解 IT governance is a mechanism in which management leads the direction-setting and control of how IT is used. The basic way to divide the work is that policies and principles affecting the whole company are handled by management, while operation and execution inside a department are handled by the head of the information systems department. Role ① “Clarifying the IT governance policy” sets the direction the entire organization should take, and role ② “Establishing the principles for deciding IT investments” lays the foundation for judging how to allocate limited management resources; both are the role of management, who oversees the whole company. On the other hand, role ③ “Deciding the division of roles and authority within the information systems department” is management inside the department, and role ④ “Managing the progress of system development based on the project plan” is execution and operation on the front line, both of which are handled by the head of the information systems department. Therefore “ア”, which assigns management ＝ ①, ② and the head of the information systems department ＝ ③, ④, is correct.
Incorrectイ
This option assigns role ③ “Deciding the division of roles and authority within the department” to management and role ② “Establishing the principles for deciding IT investments” to the head of the department, which is wrong. Role ③ is operation inside the information systems department and belongs to the department head, while role ② concerns the company-wide investment policy and belongs to management; the two assignments are exactly reversed.
Incorrectウ
This option assigns role ① “Clarifying the IT governance policy” to the department head and role ③ “Deciding the division of roles and authority within the department” to management, which is wrong. Role ① is the management task of setting the whole company’s direction, while role ③ is management inside the department and is the department head’s role; the responsible parties for both have been swapped.
Incorrectエ
This option assigns role ④ “Managing the progress of development based on the project plan” to management and role ① “Clarifying the IT governance policy” to the department head, which is wrong. Role ④ is execution and operation on the front line and is handled by the department head, while role ① is the clarification of company-wide policy and should be handled by management; the roles are mismatched.
ここがポイント
- In IT governance, remember this way of dividing responsibility: management leads the “direction-setting and control” work such as clarifying company-wide policy and establishing investment-decision principles, while the head of the information systems department handles the “execution and operation” work such as dividing roles and authority inside the department and managing development progress.
- By sorting each role with the criterion “company-level decision-making ＝ management” versus “department-internal / front-line operation ＝ department head”, you can correctly identify the combination.
用語