問42
頻出度★★★
システム監査の実施後に, 評価結果を受けて被監査部門がまとめるものとして, 適切なものはどれか。
平成30年度 春期 ITパスポート試験 問42
マネジメント系システム監査 › システム監査
This question's explanation and your answers so far.
解説
問 42
- ア
正解 In a systems audit, the auditor evaluates the audited department and compiles the results together with improvement proposals into a 'system audit report', which is reported to management. The audited department receives these evaluation results and the points that were raised, and then prepares and submits an 'improvement plan' that specifies concretely by when, what, and how the corrections will be made. Therefore, what the audited department compiles is choice ア, the improvement plan. Based on this improvement plan, the auditor later performs a follow-up to check the status of its implementation.
Incorrectイ
Audit evidence is material that the auditor collects and organizes during the audit process to support the points raised and the conclusions; it is not something the audited department under audit compiles in response to the evaluation results.
Incorrectウ
A service level agreement (SLA) is a document in which the service provider and the user agree in advance on the quality level of the service; it is not prepared based on the evaluation results of a systems audit.
Incorrectエ
The system audit report is a document in which the auditor (the audit department) compiles the evaluation results and submits them to management and others; it is not compiled by the audited department. The audited department is the party that receives the report.
ここがポイント
- Division of roles in a systems audit: the auditor compiles the evaluation results into a 'system audit report', while the audited department prepares an 'improvement plan' in response to the points raised.
- Post-audit follow-up: the auditor later checks the implementation status of the improvement plan submitted by the audited department.
用語