IPA IP 2024 Question 55
A question IPA Japan published in 令和6年度 ITパスポート試験 公開問題 問55, translated into English. ITPEC is based on the same exams.
Which of the following is an appropriate description concerning the purpose of a system audit?
Explanation
Contributing to the organization's goals by evaluating whether the risks of its information systems are addressed appropriately — that is what a system audit is for.
A system auditor, independent of the department being audited, evaluates whether the risks related to the information systems are controlled appropriately in their design and operation. The results go to management as audit opinions and recommendations for improvement. The audit itself fixes nothing; it helps the organization reach its goals and supports IT governance by showing where the controls fall short.
Answer (c)
Why not others:
- •(a) — analysing what the system is to be used for and clarifying its requirements is requirements definition, a development activity
- •(b) — planning, managing and making use of the facilities and environment where the systems are installed is facility management
- •(d) — applying knowledge, skills, tools and techniques to project activities to meet the project's requirements is the definition of project management
Key rule: A system audit evaluates, from an independent standpoint, whether information-system risks are controlled, and reports to management; it neither builds, runs nor manages the systems it audits.
System Audit · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.