情報システムの企画, 開発, 運用, 保守に関わるマネジメントとプロセスに対して, IT ガバナンスにおける経営陣の活動として, 評価, 指示, モニターを実施する必要がある。IT ガバナンスにおける経営陣の活動に関する記述として, 適切なものだけを全て挙げたものはどれか。 a 外部のコンサルタントに責任と権限を委譲し, 戦略立案からモニタリングまで全面的に任せる。 b 情報システム戦略で想定した効果が, どの程度達成されているか確認するための情報を収集する。 c 情報システム戦略を実現するために, 必要な責任と要員を組織に割り当てる。 d 情報システムの複数の将来像を想定し, 外部の情報システムの専門家に比較分析を依頼して評価する。
令和8年度 ITパスポート試験 問35
This question's explanation and your answers so far.
問 35
Incorrectア
The combination a, b, c. b and c are appropriate, but including a is wrong. a fully delegates responsibility and authority to an external consultant, throwing away the governance (evaluate, direct, monitor) that the management team should carry out itself, so it is inappropriate. In addition, the appropriate item d is missing.
Incorrectイ
The combination a, c. c is appropriate, but it includes the inappropriate a and is missing the appropriate b and d. Treating a as an activity of the management team is itself wrong.
Incorrectウ
The combination b, c. Both b and c are appropriate, but the equally appropriate item d (envisioning future states and evaluating them = evaluate) is missing, so it does not form a combination that lists “all and only the appropriate items” and is incomplete.
- エ
正解 The correct answer is エ (b, c, d). In IT governance, the management team's activities rest on the pillars of “evaluate, direct, and monitor” (the EDM model, ISO/IEC 38500), and the management team itself is the main agent for all of them. b collects information to confirm to what extent the effects envisioned in the information system strategy have been achieved, so it falls under “monitor” and is appropriate. c assigns the necessary responsibilities and personnel to the organization in order to realize the strategy, so it falls under “direct” and is appropriate. d envisions multiple future states and uses an external expert's comparative analysis as “input,” while the management team ultimately performs the evaluation, so it falls under “evaluate” and is appropriate. Therefore the appropriate items are the three b, c, and d, and エ, which lists all and only these, is correct.
- In IT governance, the management team's activities form the EDM model of “evaluate, direct, monitor” (ISO/IEC 38500), and these are carried out with the management team as the main agent.
- Responsibility for governance is held by the management team and cannot be fully delegated to an external consultant. External experts should be used as “input and support” for evaluation and the like, while the final judgment is made by the management team.