Exam 10: Governance of the Information Systems Organization

Match the disadvantages below as either being associated with a centralized IT governance approach or a decentralized IT governance approach.

Match the SoX compliance methodology with its description.

As a result of Sarbanes-Oxley Act, the CEO, CFO and CIO must certify financial accounting records.

As a result of Sarbanes-Oxley, IT managers are now required to manage the level of controls needed to mitigate risk in business processes.

This IT governance archetype consists only of business unit leaders, key process owners, or their delegates.

This IT governance archetype consists of IT individuals or groups of IT executives.

The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories?

This is an IT governance framework that is consistent with COSO controls.

This type of organization management is where IT controls most of its IT infrastructure in one location.

IT organizations implement powerful information systems like ERP and SCM that provide centralized data repositories. In addition, business units have tools for their particular units that individuals can use to report on and analyze collected data. This IT governance approach is best described as: ________.

Why is it recommended that the IT governance archetype for an organization's information security strategy be business monarch?

________ of the 1960's dictated a centralized approach to IT governance.

IT decisions have been categorized by Peter Weill and Jeanne Ross. These categories include all of the following EXCEPT:

______________ organizations scatter IT components in different locations to address local business needs.

This is a committee that is formally designated to approve, monitor and review specific topics that ensure IT governance.

Define federalism as it pertains to organizational structures. How does it improve on the centralized model?

This IT governance archetype consists of C-level executives and at least one other business group. An IT executive may be an additional participant.

Explain the role the IT organization has in ensuring a company's Sarbanes-Oxley compliance.

The decisions that determine how IT assets are structured fall into which one of the five major IT decision categories?

Federal IT provides for strong centralization, like the U.S. Federal Government.