ITPEC IP April 2020 Question 63

IT governance — the organizational ability to control the creation and execution of the IT strategy and steer it toward competitive advantage.

IT governance is exercised by top management: it sets an information systems strategy in line with the business strategy, decides who makes IT decisions, and monitors that IT investment and use deliver value while risk stays under control. Controlling how the IS strategy is developed and implemented so that it improves competitiveness is exactly this role.

Answer (a)

Why not others:

• •(b) Compliance — adherence to laws, regulations and internal rules; it constrains the strategy but does not direct it
• •(c) Systems audit — an independent evaluation of information systems and their controls; it checks governance and management rather than exercising control over the strategy
• •(d) Project management — manages one temporary project to its scope, schedule and cost; it executes part of a strategy, it does not control the strategy as a whole

Key rule: Governance directs and controls IT (top management's role), management executes (projects, services), and audit independently checks both.

System Audit · AI-written, may contain errors