IT Service Management and Systems Audit

Which of the following describes IT governance appropriately?

  1. AThe information systems department setting the procedures for day-to-day operation of servers and networks and carrying out the work exactly as those procedures say
  2. BThe system in which management takes the lead in giving direction to the strategy for using IT, evaluating and monitoring its execution and results, to achieve the organization's goals and raise corporate value
  3. CThe project manager managing the schedule, cost and quality of a development project by comparing actual results with the plan
Show answer and explanation

Answer: B. The system in which management takes the lead in giving direction to the strategy for using IT, evaluating and monitoring its execution and results, to achieve the organization's goals and raise corporate value

IT governance is the system by which management (the board and other senior leadership) takes responsibility for directing IT investment and use, and for evaluating and monitoring its execution and results, so that the use of IT fits the organization's goals and strategy. The international standard ISO/IEC 38500 describes the role of the governing body as Evaluate, Direct and Monitor. Procedures for day-to-day operations and the management of individual projects are management activities carried out under the direction of IT governance.

  • A. This is an activity of IT operations management, which differs from IT governance led by management.
  • B. Correct. Management takes the lead in directing the use of IT and evaluating and monitoring it.
  • C. This is an activity of project management.
Practice this topic Back to topic

Books on IT Service Management and Systems Audit Ad

As an Amazon Associate I earn from qualifying purchases.

More IT Service Management and Systems Audit questions

  1. Monitoring, a basic component of internal control, consists of ongoing monitoring and independent evaluations. Which of the following is an independent evaluation?
  2. Within the "response to IT" in internal control, which of the following is an IT general control?
  3. Which of the following describes the approach of IT service management appropriately?
  4. Which of the following is a document in which an IT service provider collects the list of IT services that users can choose and use, together with the description of each, its conditions of use, its standard service levels and how to request it or make inquiries?
  5. To achieve the service levels promised to users in an SLA, an IT service provider agrees with the network operations department and other departments within the same organization on the content and level of the work each is responsible for. Which of the following is this agreement?