Chapter 9 Flashcards

1
Q

Archetype

A

Archetype: A pattern resulting from decision rights allocation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Centralized IS Organizations

A

Centralized IS organization: The organization structure that brings together all power, staff, hardware, software,
data, and processing into a single location/position

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Control Objectives for Information and Related Technology)

A

Control Objectives for Information and Related Technology (COBIT): The IT governance framework
for decision controls that is consistent with the Committee of Sponsoring Organizations of the Treadway
Commission (COSO) and that provides systematic rigor needed for the strong internal controls and Sarbanes–
Oxley compliance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Consumerization

A

Consumerization of IT: The drive to port applications to personal devices and the ensuing issues involved in making them work in business organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Decentralized IS Organizations

A

Decentralized IS organization: The IS organization structure that scatters power, hardware, software, networks,
and data components in different locations/positions to address local business needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Digital Ecosystem

A

Members of the ecosystem contribute their strengths,
giving the whole ecosystem a complete set of capabilities
that can impact decision making and operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Federalism

A

Federalism: The organization structuring approach that distributes power, hardware, software, data, and personnel
between a central IS group and IS in business units.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Governance

A

Governance (in the context of business enterprises): The established process of making decisions, defining
expectations, granting power, or verifying performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Information Technology Infrastructure Library (ITIL)

A

Information Technology Infrastructure Library (ITIL): The control framework that offers a set of concepts
and techniques for managing information technology infrastructure, development, and operations that was developed in United Kingdom.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

IT Governance

A
Information technology (IT) governance: The established decision rights and accountability framework to 
encourage desirable behavior in using IT.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Review Board

A

Review board: A committee that is formally designated to approve, monitor, and review specific topics related to
the IS department and systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Sarbanes-Oxley Act (SoX)

A

Sarbanes–Oxley (SoX) Act of 2002: The U.S. act to increase regulatory visibility and accountability of public
companies and their financial health.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Steering Committee

A

Steering committee: An IT governance mechanism that calls for joint participation of IT and business leaders in
making decisions about IT as a group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. This is an IT governance framework that is consistent with COSO controls.
    a) HIPPA
    b) COBIT
    c) SoX
    d) ISACA
    e) ISO
A

b) COBIT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
  1. The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?
    a) Marketing
    b) Production
    c) Sales
    d) IT
    e) Finance
A

e) Finance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
  1. All of the following are frameworks for implementing Sarbanes-Oxley compliance EXCEPT:
    a) COSO
    b) BCP
    c) COBIT
    d) ITIL
    e) Committee for Sponsoring Organization of the Treadway Commission
A

b) BCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q
  1. All of the following are mechanisms that can be created to ensure good IT governance EXCEPT:
    a) Policies
    b) Review boards
    c) Steering Committees
    d) Consultants
    e) IT Governance Council
A

d) Consultants

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q
  1. After Intel faced strong shifts in technologies, such as cloud services, social networking, mobile devices, etc., Intel realized that it needed to establish better governance, creating a _______________.
    a) Employee boards
    b) Customer boards
    c) Security committees
    d) Information governance boards
    e) Higher control framework
A

d) Information governance boards

19
Q
  1. This is a balanced approach to managing a company’s IT organization.
    a) Centralization
    b) Decentralization
    c) Federalism
    d) Joint-Control
    e) Business Centricity
A

c) Federalism

20
Q
  1. This type of organization management is where IT controls most of its IT infrastructure in one location.
    a) Distributed IS organization
    b) Decentralized IS organization
    c) Federalism
    d) Joint-Control IS organization
    e) Centralized IS organization
A

e) Centralized IS organization

21
Q
  1. Most companies would like to obtain the advantages derived from both centralized and decentralized organizational paradigms. What type of IT governance model would best help them to achieve this goal?
    a) Distributed Control
    b) Decentralized
    c) Federalism
    d) Joint-Control
    e) Centralized
A

c) Federalism

22
Q
  1. IT organizations implement powerful information systems like ERP and SCM that provide centralized data repositories. In addition, business units have tools for their particular units that individuals can use to report on and analyze collected data. This IT governance approach is best described as: ________.
A

c) Federalism

23
Q
  1. ________ of the 1960’s dictated a centralized approach to IT governance.
    a) Servers
    b) Mainframes
    c) Networks
    d) PCs
    e) The WWW
A

b) Mainframes

24
Q
  1. ________ of the 1980’s allowed computing power to spread and gave rise to a decentralized approach to IT governance.
    a) Servers
    b) Mainframes
    c) Networks
    d) PCs
    e) The WWW
25
12. ______________ organizations scatter IT components in different locations to address local business needs. a) Distributed Control b) Decentralized c) Federalism d) Joint-Control e) Centralized
b) Decentralized
26
13. The IT Governance Council reports directly to the board of directors or the ________. a) CIO b) CTO c) CEO d) COO e) CFO
c) CEO
27
14. IT governance has two major components: the assignment of decision-making authority and responsibility, and the __________________________. a) cost considerations b) decision rights c) business plan d) capability maturity model e) decision-making mechanisms
e) decision-making mechanisms
28
15. The archetype that is represented by a group of business executives that might or might not include the CIO is: a) IT monarchy b) Feudal c) Federal d) Business monarchy e) IT duopoly
d) Business monarchy
29
16. The archetype that is represented by IT executives and one other group is: a) IT monarchy b) Feudal c) Federal d) Business monarchy e) IT duopoly
e) IT duopoly
30
17. IT decisions have been categorized by Peter Weill and Jeanne Ross. These categories include all of the following EXCEPT: a) IT principles b) IT architecture c) IT infrastructure d) Business application needs e) IT security
e) IT security
31
18. The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories? a) IT principles b) IT architecture c) IT infrastructure d) Business application needs e) IT investment and prioritization
e) IT investment and prioritization
32
19. The decisions that determine how IT assets are structured fall into which one of the five major IT decision categories? a) IT principles b) IT architecture c) IT infrastructure d) Business application needs e) IT investment and prioritization
b) IT architecture
32
19. The decisions that determine how IT assets are structured fall into which one of the five major IT decision categories? a) IT principles b) IT architecture c) IT infrastructure d) Business application needs e) IT investment and prioritization
b) IT architecture
33
20. This IT governance archetype consists of IT individuals or groups of IT executives. a) Business monarchy b) IT monarchy c) Feudal d) Federal e) IT Duopoly
b) IT monarchy
34
21. This IT governance archetype consists of C-level executives and at least one other business group. An IT executive may be an additional participant. a) Business monarchy b) IT monarchy c) Feudal d) Federal e) IT Duopoly
d) Federal
35
22. A steering committee works especially well with this particular IT governance archetype. a) Business monarchy b) IT monarchy c) Feudal d) Federal e) IT Duopoly
d) Federal
36
23. A steering committee is geared only towards the highest level of the organization and reports directly to the board of directors or the CEO. tf
F
37
24. As a result of Sarbanes-Oxley, IT managers are now required to manage the level of controls needed to mitigate risk in business processes.
Ans: True (Medium)
38
25. The global nature of business today makes complete centralization impossible.
T
39
26. IT plays a major role in ensuring the accuracy of financial data.
T
40
27. As a result of Sarbanes-Oxley Act, the CEO, CFO and CIO must certify financial accounting records.
F
41
28. There were pressures for centralizing IT back when mainframes ruled, but today’s use of “consumerized” technologies have provided strong pressure, by IT people, for decentralization.
F
42
29. Federal IT provides for strong centralization, like the U.S. Federal Government.
F