問53
頻出度★★★
IT が適切に活用されるために企業が実施している活動を, ルールを決める活動と, ルールに従って行動する活動に分けたとき, ルールを決める活動に該当するものはどれか。
令和5年度 ITパスポート試験 問53
マネジメント系システム監査 › 内部統制
This question's explanation and your answers so far.
解説
問 53
- ア
正解 The correct answer is ア. The question divides a company’s IT-utilization activities into activities that establish rules and activities that act according to those rules, and asks you to choose the former. Establishing criteria for IT investment decisions means creating the very criteria used to judge which IT investments should be made; this is exactly an activity that establishes rules governing future actions. Setting criteria, standards, and policies is the making of rules that subsequent individual actions rely on, and from the standpoint of IT governance it belongs to the side where management defines the framework.
Incorrectイ
Operations management to comply with the SLA is the activity of carrying out day-to-day operations in order to keep a previously agreed SLA (an agreement on service quality, i.e., a rule). It is on the side that acts according to existing rules, not an activity that establishes rules.
Incorrectウ
Budget management of a development project is the activity of controlling and managing operations so that costs stay within a set budget (a rule). This too is on the side that acts according to a set framework, not an activity that establishes the rule itself.
Incorrectエ
Promoting an individual project in conformance with a standard system development method is the activity of advancing each project according to an already-established standard method (a rule). The very wording “in conformance with” expresses an action that follows a rule, not an activity that establishes rules.
ここがポイント
- Distinguish them by this division: activities that establish rules are the side that formulates criteria, standards, and policies, while activities that act according to rules are the side that operates and carries them out day to day in conformance with those rules.
- Grasp the division of roles in IT governance: management defines the framework (rules), such as IT investment decision criteria, and IT management executes and operates according to that framework.
用語