問44
頻出度★★★
業務処理時間の短縮を目的として，運用中の業務システムの処理能力の改善を図った。この改善が有効であることを評価するためにシステム監査を実施するとき，システム監査人が運用部門に要求する情報として，適切なものはどれか。
令和元年度 秋期 ITパスポート試験 問44
マネジメント系システム監査 › システム監査
This question's explanation and your answers so far.
解説
問 44
- ア
正解 The purpose of the improvement is “to shorten business processing time,” and the auditor must objectively evaluate whether the improvement truly produced results. Whether the processing capacity (performance) improved can only be judged by comparing measured values before and after the improvement, such as response time, number of processed transactions (throughput), and CPU and memory usage rates. What records these actual figures is the “operating statistics data,” which is the most appropriate audit evidence for substantiating the effectiveness of the performance improvement. Therefore, the information that should be requested from the operations department is “ア Operating statistics data.”
Incorrectイ
The “system operations structure” shows the organizational and role-division framework of who operates the system in what role; it does not reveal the performance result of whether processing time was actually shortened. It cannot serve as evidence for evaluating effectiveness.
Incorrectウ
The “system operations manual” is a document that defines operating procedures; although it can show whether the procedures are appropriate, it does not contain measured results of whether the improvement raised the processing capacity. It cannot be used to evaluate the effect.
Incorrectエ
The “user manual” is an operating guide for end users and is unrelated to the system’s performance or processing-time results. It cannot serve as material for evaluating the effectiveness of the processing-capacity improvement.
ここがポイント
- A systems audit makes judgments based on objective audit evidence. To evaluate the “effectiveness” of a performance improvement, you need operating statistics data that records the operating results before and after the improvement (response time, throughput, resource usage rates).
- Documents such as the operations structure, procedures, and user-facing explanations merely show “how it is operated”; they cannot substantiate the quantitative effect of “whether performance actually improved.”
用語