ITPEC IP October 2025 Question 64

Topic: System AuditAlso asked in October 2019

Regarding the roles (i) through (iv) below for establishing appropriate IT governance, which of the following is the appropriate combination of the roles of the company executive responsible for it and the person responsible for the information system department?

(i)Defining the IT governance policy(ii)Formulating principles for decisions on investment in computerization(iii)Deciding the roles and the rights within the information system department(iv)Performing progress management in system development on the basis of a project plan
OptionThe company executiveThe person responsible for the information system department

Explanation

Management: (i), (ii); head of the information system department: (iii), (iv) — management sets the direction of IT for the whole company, and the department head runs the work within it.

IT governance, directing IT use in line with business strategy, is management's responsibility, so decisions binding the whole company are theirs:

  • •(i) Defining the IT governance policy — the direction of IT use
  • •(ii) Formulating principles for decisions on investment in computerization — criteria for every IT investment

The head of the information system department executes within that framework:

  • •(iii) Deciding the roles and the rights within the department — organizing the department
  • •(iv) Progress management of system development against the project plan — day-to-day control

Answer (a)

Why not others:

  • •(b) — gives the company-wide investment principles (ii) to the department head and the department's internal roles (iii) to management
  • •(c) — gives the IT governance policy (i) itself to the department head, and the department's internal roles (iii) to management
  • •(d) — gives the governance policy (i) to the department head and operational progress control (iv) to management

Key rule: Management evaluates, directs and monitors IT for the whole organization (policy, investment principles); the IT department plans, builds and runs within that direction (its own organization, project control).

System Audit · AI-written, may contain errors

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.