IPA IP 2020 Question 45

The organizational ability to control the creation and execution of IT strategy and lead it in the ideal direction — that is IT governance, which steers IT toward the company's competitive advantage.

IT governance is exercised by top management: it sets an IT strategy in line with the business strategy, decides who makes IT decisions, and monitors that IT investment and use deliver value while risk stays under control. It concerns the direction and control of IT across the whole organization, not the running of one service, one audit or one security programme.

Answer (a)

Why not others:

• •(b) — implementing good-quality IT services that meet business needs is IT service management
• •(c) — evaluation by a third party that the controls over information-system risks are appropriately designed and operated is a system audit
• •(d) — ensuring and maintaining information security with technical, physical, human and organizational measures, run organization-wide under top management, is information security management (an ISMS), only one part of what IT governance oversees

Key rule: Governance directs and controls IT (top management's role), management executes (service and security management), and audit independently checks both.

System Audit · AI-written, may contain errors