問55
頻出度★★★
システム監査の目的に関する記述として, 適切なものはどれか。
令和6年度 ITパスポート試験 問55
マネジメント系システム監査 › システム監査
This question's explanation and your answers so far.
解説
問 55
Incorrectア
“Analyzing the uses of the system to be developed and clarifying the system requirements” describes requirements definition (requirements analysis), an upstream process of system development; it is not the purpose of an audit. An audit checks and evaluates the system from an independent position (across its whole life cycle, including development), and is not the party that decides its requirements.
Incorrectイ
“Comprehensively planning, managing, and utilizing facilities and their environment” describes facility management, which deals with physical environments such as buildings and equipment; it is a field separate from systems auditing.
- ウ
正解 A systems audit is an activity in which an auditor in an independent position inspects, evaluates, and verifies an information system. Its purpose is to evaluate whether appropriate controls are established and operated against the risks related to the information system (failures, information leakage, fraud, and so on) and whether those risks are being appropriately addressed, thereby contributing to the achievement of the organization’s goals. Choice ウ states exactly this idea of “evaluating how risks are being addressed and contributing to the achievement of the organization’s goals,” which is the very purpose set out by the systems audit standards, so it is correct.
Incorrectエ
“Satisfying a project’s requirements by applying knowledge, skills, tools, and techniques to project activities” describes project management (the definition of project management given by PMBOK); it is not the purpose of an audit.
ここがポイント
- The purpose of a systems audit is for an independent auditor to evaluate whether the response (controls) to risks related to the information system is appropriate, thereby contributing to the achievement of the organization’s goals.
- The confusing choices are the definitions of requirements definition, facility management, and project management; distinguish them as work belonging to separate fields.
用語