IPA IP 2024 Question 54
A question IPA Japan published in 令和6年度 ITパスポート試験 公開問題 問54, translated into English. ITPEC is based on the same exams.
Which of the following is the initiative that has compliance with laws and regulations relating to the business activities, etc. as one of its objectives, and is composed of control environment, risk assessment and response, control activities, information and communication, monitoring, and response to IT?
Explanation
Internal control — compliance with laws and regulations is one of its objectives, and the six items listed are its basic components.
Internal control is the process built into a company's operations to give reasonable assurance that its objectives are met. Japan's framework for internal control, the one behind the reporting rules for listed companies (J-SOX), names four objectives (effectiveness and efficiency of operations, reliability of financial reporting, compliance with laws and regulations relating to business activities, and safeguarding of assets) and six basic components: control environment, risk assessment and response, control activities, information and communication, monitoring, and response to IT. The international COSO framework it is based on has five components; Japan added response to IT.
Answer (c)
Why not others:
- •(a) CMMI — a maturity model that rates and improves development processes in five levels
- •(b) ITIL — a collection of best practices for IT service management
- •(d) Risk management — identifies, analyses, evaluates and treats risks; risk assessment and response is only one of the components of internal control, not the whole framework
Key rule: Control environment, risk assessment, control activities, information and communication, and monitoring, plus response to IT in Japan's version, with compliance as an objective, identify internal control.
System Audit · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.