Exam 8: Governance of the Information Systems Organization

Match the disadvantages below as either being associated with a centralized IT governance approach or a decentralized IT governance approach.

This term is used to describe the increasingly powerful tools available to consumers that are impacting corporations.

The US Army is embracing BYOD by launching a program to ensure soldiers have the appropriate decision rights to select his/her computing device.

________ of the 1960's dictated a centralized approach to IT governance.

The establishment of information security policies requires IT leaders to set security standards and business leaders to understand the implications for users and business processes.Therefore,the IT governance archetype recommended in this situation is which one of the following?

Match the advantages below as either being associated with a centralized IT governance approach or a decentralized IT governance approach.

This is the act through which behavior is aligned with business goals through empowerment and monitoring.

Security strategy is not a technical decision.

______________ organizations scatter IT components in different locations to address local business needs.

Explain how federalism is able to capture the benefits of centralized and decentralized IT governance while eliminating the drawbacks of each.

This type of organization management is where IT controls most of its IT infrastructure in one location.

IT decisions have been categorized by Peter Weill and Jeanne Ross.These categories include all of the following EXCEPT:

This IT governance archetype consists of C-level executives and at least one other business group.An IT executive may be an additional participant.

The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?

Define federalism as it pertains to organizational structures. How does it improve on the centralized model?

As a result of Sarbanes-Oxley,IT managers are now required to manage the level of controls needed to mitigate risk in business processes.

The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories?

Match the SoX compliance methodology with its description.

The combinations of people to whom decision rights are allocated are classified by various IT governance ________.

After its PlayStation Network service was compromised,Sony realized that it needed to establish better ____________ governance.