ITPEC IP April 2025 Question 63
ITPEC IP April 2025 — Question 63 of 100
Management is responsible for establishing IT governance — governing IT is part of directing and controlling the organization.
Senior management sets decision rights, accountability, policies, priorities, and monitoring arrangements so that IT supports business objectives and risks are controlled. Responsibilities may be delegated, but management remains accountable for establishing the governance framework.
Answer (b)
Why not others:
- (a) Shareholders provide ownership oversight but do not design day-to-day organizational governance
- (c) System auditor independently evaluates governance and controls rather than establishing them
- (d) Head of systems operates within the framework and cannot alone establish company-wide governance
Key rule: Management establishes and owns governance; auditors independently assess whether that governance is appropriate and effective.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.