Chapter 9 Flashcards
Archetype
Archetype: A pattern resulting from decision rights allocation.
Centralized IS Organizations
Centralized IS organization: The organization structure that brings together all power, staff, hardware, software,
data, and processing into a single location/position
Control Objectives for Information and Related Technology)
Control Objectives for Information and Related Technology (COBIT): The IT governance framework
for decision controls that is consistent with the Committee of Sponsoring Organizations of the Treadway
Commission (COSO) and that provides systematic rigor needed for the strong internal controls and Sarbanes–
Oxley compliance.
Consumerization
Consumerization of IT: The drive to port applications to personal devices and the ensuing issues involved in making them work in business organizations.
Decentralized IS Organizations
Decentralized IS organization: The IS organization structure that scatters power, hardware, software, networks,
and data components in different locations/positions to address local business needs
Digital Ecosystem
Members of the ecosystem contribute their strengths,
giving the whole ecosystem a complete set of capabilities
that can impact decision making and operations.
Federalism
Federalism: The organization structuring approach that distributes power, hardware, software, data, and personnel
between a central IS group and IS in business units.
Governance
Governance (in the context of business enterprises): The established process of making decisions, defining
expectations, granting power, or verifying performance.
Information Technology Infrastructure Library (ITIL)
Information Technology Infrastructure Library (ITIL): The control framework that offers a set of concepts
and techniques for managing information technology infrastructure, development, and operations that was developed in United Kingdom.
IT Governance
Information technology (IT) governance: The established decision rights and accountability framework to encourage desirable behavior in using IT.
Review Board
Review board: A committee that is formally designated to approve, monitor, and review specific topics related to
the IS department and systems.
Sarbanes-Oxley Act (SoX)
Sarbanes–Oxley (SoX) Act of 2002: The U.S. act to increase regulatory visibility and accountability of public
companies and their financial health.
Steering Committee
Steering committee: An IT governance mechanism that calls for joint participation of IT and business leaders in
making decisions about IT as a group
- This is an IT governance framework that is consistent with COSO controls.
a) HIPPA
b) COBIT
c) SoX
d) ISACA
e) ISO
b) COBIT
- The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?
a) Marketing
b) Production
c) Sales
d) IT
e) Finance
e) Finance
- All of the following are frameworks for implementing Sarbanes-Oxley compliance EXCEPT:
a) COSO
b) BCP
c) COBIT
d) ITIL
e) Committee for Sponsoring Organization of the Treadway Commission
b) BCP
- All of the following are mechanisms that can be created to ensure good IT governance EXCEPT:
a) Policies
b) Review boards
c) Steering Committees
d) Consultants
e) IT Governance Council
d) Consultants
- After Intel faced strong shifts in technologies, such as cloud services, social networking, mobile devices, etc., Intel realized that it needed to establish better governance, creating a _______________.
a) Employee boards
b) Customer boards
c) Security committees
d) Information governance boards
e) Higher control framework
d) Information governance boards
- This is a balanced approach to managing a company’s IT organization.
a) Centralization
b) Decentralization
c) Federalism
d) Joint-Control
e) Business Centricity
c) Federalism
- This type of organization management is where IT controls most of its IT infrastructure in one location.
a) Distributed IS organization
b) Decentralized IS organization
c) Federalism
d) Joint-Control IS organization
e) Centralized IS organization
e) Centralized IS organization
- Most companies would like to obtain the advantages derived from both centralized and decentralized organizational paradigms. What type of IT governance model would best help them to achieve this goal?
a) Distributed Control
b) Decentralized
c) Federalism
d) Joint-Control
e) Centralized
c) Federalism
- IT organizations implement powerful information systems like ERP and SCM that provide centralized data repositories. In addition, business units have tools for their particular units that individuals can use to report on and analyze collected data. This IT governance approach is best described as: ________.
c) Federalism
- ________ of the 1960’s dictated a centralized approach to IT governance.
a) Servers
b) Mainframes
c) Networks
d) PCs
e) The WWW
b) Mainframes
- ________ of the 1980’s allowed computing power to spread and gave rise to a decentralized approach to IT governance.
a) Servers
b) Mainframes
c) Networks
d) PCs
e) The WWW
d) PCs