問45
頻出度★★★
IT ガバナンスの説明として, 最も適切なものはどれか。
令和2年度 ITパスポート試験 問45
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 45
- ア
正解 IT governance refers to an organizational capability (governance = to govern) by which top management takes the lead in controlling the formulation and execution of the IT strategy and steers the organization in the desired direction, with the aim of building competitive advantage. Choice ア is exactly this definition itself; it describes a management-level mechanism that aligns IT investment and computerization with business goals and provides direction and oversight, so it is correct.
Incorrectイ
Providing high-quality IT services that meet business needs is a description of IT service management (the ITIL concept); it refers to managing day-to-day IT operations and service delivery. This differs from IT governance, which is an organizational capability that provides direction at the management level.
Incorrectウ
A third party evaluating whether the controls for risks associated with information systems are appropriately established and operated is a description of a system audit (IT audit). It is an evaluation and assurance activity conducted from an independent standpoint, and its role differs from IT governance, which is governance itself.
Incorrectエ
Carrying out technical, physical, human, and organizational measures in an organized manner in order to ensure and maintain information security is a description of information security management (ISMS). Its scope is limited to information security, and it differs from IT governance, which provides direction for the entire IT strategy, in both scope and purpose.
ここがポイント
- Grasp the definition: IT governance = a management-level organizational capability (governance) by which a company controls the formulation and execution of its IT strategy and steers it toward the desired direction of building competitive advantage.
- Distinguish the similar terms: do not confuse it with IT service management (service delivery), system audit (third-party evaluation), or information security management (security measures).
用語