I85PREP
⌘ K
ICSAN MIS study materials
ICSAN MIS study resources

ICSAN MIS practice questions

One question at a time. Build your ICSAN MIS understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Foundations of information systems and their role in organisations

In the context of information systems, which statement best distinguishes data from information?

  1. Data is the output of a system, while information is the raw input.
  2. Data and information are identical terms used interchangeably in systems theory.
  3. Data is always stored digitally, while information exists only on paper.
  4. Data consists of raw, unprocessed facts and figures, while information is data that has been processed and given meaning. Correct answer.

Explanation

Data refers to raw, unorganised facts and symbols that on their own carry little meaning. Information is produced when data is processed, organised and contextualised so it becomes meaningful to a user. This transformation is the core function of any information system.

Question 2Foundations of information systems and their role in organisations

A retail company installs a system that records every sale, calculates daily revenue totals and emails a summary to managers. Which component of an information system does the revenue calculation represent?

  1. Processing Correct answer.
  2. Input
  3. Storage
  4. Feedback

Explanation

Processing is the transformation of raw input data into useful output, and calculating revenue totals from sales records is exactly that transformation. Input would be the raw sales records, while feedback would be a control signal comparing output to a target.

Question 3Foundations of information systems and their role in organisations

Which type of information system is primarily designed to support unstructured, strategic decisions at the senior management level?

  1. Executive information system (EIS) Correct answer.
  2. Transaction processing system (TPS)
  3. Management information system (MIS)
  4. Office automation system (OAS)

Explanation

Executive information systems are tailored for senior executives, emphasising summarised, high-level, often external information for strategic and unstructured decisions. TPS and MIS operate at lower levels handling routine transactions and structured reports.

Question 4Foundations of information systems and their role in organisations

In a manufacturing firm, a system that monitors production-line sensor readings and adjusts machinery in real time without human intervention is best described as which kind of system?

  1. A decision support system
  2. A knowledge management system
  3. A closed-loop control system Correct answer.
  4. An expert system

Explanation

A closed-loop (feedback) control system uses sensor feedback to automatically adjust its operation toward a target state without human intervention. This differs from decision support, which assists rather than actuates, and from expert systems that encode human expertise.

Question 5Foundations of information systems and their role in organisations

Which of the following best describes the role of an information system in supporting an organisation's value chain?

  1. It can lower costs and add value at each primary and support activity of the chain. Correct answer.
  2. It only affects the inbound logistics activity of a firm.
  3. It operates independently of the organisation's business processes.
  4. It replaces the need for any business strategy.

Explanation

Information systems can be applied across primary activities such as logistics and marketing, and support activities such as procurement and human resources, to reduce cost or add differentiation. They therefore contribute value at multiple points along the value chain.

Question 6Foundations of information systems and their role in organisations

A bank's system that handles deposits, withdrawals and transfers at the operational level is best classified as which type of system?

  1. Transaction processing system Correct answer.
  2. Decision support system
  3. Group decision support system
  4. Executive information system

Explanation

Transaction processing systems capture and process the routine, day-to-day operational transactions of an organisation, such as banking deposits and withdrawals. They sit at the operational level and emphasise accuracy and reliability.

Question 7Foundations of information systems and their role in organisations

Which characteristic most clearly distinguishes an intranet from the public internet?

  1. An intranet cannot host web pages.
  2. An intranet uses a different underlying protocol from the internet.
  3. An intranet operates without any network infrastructure.
  4. An intranet is restricted to authorised users within an organisation. Correct answer.

Explanation

An intranet uses internet technologies such as HTTP and TCP/IP but restricts access to authorised members of an organisation for internal information sharing. The distinguishing feature is controlled, private access rather than a different technology.

Question 8Foundations of information systems and their role in organisations

A manager uses a system that combines internal sales data with external market research and applies analytical models to explore 'what-if' scenarios. Which system category does this represent?

  1. Transaction processing system
  2. Process control system
  3. Payroll system
  4. Decision support system Correct answer.

Explanation

Decision support systems combine internal and external data with analytical models to support semi-structured decisions and scenario analysis. This matches the described use of market data and what-if modelling.

Question 9Foundations of information systems and their role in organisations

Which of the following is the most accurate description of the input-process-output model of an information system?

  1. Input and output are the same thing viewed from different perspectives.
  2. Input captures data, processing transforms it, and output delivers the resulting information. Correct answer.
  3. Output is stored data that is never presented to users.
  4. Processing occurs only after output has been delivered to users.

Explanation

The input-process-output model describes a system as capturing raw data (input), transforming it (processing), and delivering useful information (output). This sequence is fundamental to understanding how information systems function.

Question 10Foundations of information systems and their role in organisations

An organisation wants a system to capture and share employees' expertise and documents so that knowledge is retained when staff leave. Which type of system best fits this requirement?

  1. Knowledge management system Correct answer.
  2. Executive information system
  3. Process control system
  4. Transaction processing system

Explanation

Knowledge management systems are designed to capture, store, organise and disseminate organisational knowledge and expertise. They address the risk of knowledge loss when employees depart.

Question 11Foundations of information systems and their role in organisations

Which statement best explains why information systems are considered a strategic resource for organisations?

  1. They guarantee increased profit regardless of how they are used.
  2. They are always cheaper to operate than manual processes.
  3. They eliminate the need for organisational change management.
  4. They can create competitive advantage by enabling new capabilities, efficiency or differentiation. Correct answer.

Explanation

Information systems can be strategic when they enable new products, lower costs, improve customer service or create switching costs, thereby supporting competitive advantage. Their value depends on alignment with strategy rather than being automatic.

Question 12Foundations of information systems and their role in organisations

In a systems context, what does 'feedback' refer to?

  1. The external environment surrounding the system
  2. The physical storage medium used by the system
  3. The output of a system compared against a standard to adjust future operation Correct answer.
  4. The raw data initially entered into the system

Explanation

Feedback is information about the output of a system that is compared with a standard or goal and used to adjust the system's operation. It is a control mechanism that helps systems self-regulate.

Question 13Foundations of information systems and their role in organisations

A firm's sales staff access customer records remotely through a secure browser-based portal hosted on company servers. This arrangement is best described as which type of system?

  1. A manual filing system
  2. An extranet-accessible internal application Correct answer.
  3. A public social network
  4. A stand-alone desktop application

Explanation

Providing controlled external or remote access to internal applications through web technologies is characteristic of extranet-style or secured remote access arrangements. Authorised users reach internal resources while access remains restricted.

Question 14Foundations of information systems and their role in organisations

Which of the following best describes the relationship between business processes and information systems?

  1. Information systems and business processes are unrelated concepts.
  2. Business processes exist only where no information system is deployed.
  3. Information systems replace business processes entirely.
  4. Information systems support and often automate the execution of business processes. Correct answer.

Explanation

Business processes are sets of related activities that produce value, and information systems support, coordinate and increasingly automate their execution. The two are closely intertwined, with systems enabling efficiency and consistency in process execution.

Question 15Foundations of information systems and their role in organisations

A system that encodes the rules and reasoning of human specialists to diagnose equipment faults is best described as which type of system?

  1. An expert system Correct answer.
  2. A transaction processing system
  3. A management information system
  4. An office automation system

Explanation

Expert systems capture the knowledge and inference rules of domain specialists to provide advice or diagnoses. They mimic expert reasoning in a narrow domain such as fault diagnosis.

Question 16Foundations of information systems and their role in organisations

Which statement about the components of an information system is most accurate?

  1. An information system includes people, processes, data, hardware, software and networks. Correct answer.
  2. People are external to an information system and not part of it.
  3. An information system consists only of hardware and software.
  4. Data is not considered a component of an information system.

Explanation

A complete information system comprises people, processes, data, hardware, software and networks working together. Focusing only on technology omits the human and procedural elements essential to system operation.

Question 17Foundations of information systems and their role in organisations

A logistics firm uses a system to track shipments and share status with suppliers and customers across organisational boundaries. This system is best classified as which type?

  1. A stand-alone spreadsheet
  2. A personal productivity tool
  3. An inter-organisational system Correct answer.
  4. A closed internal payroll system

Explanation

Inter-organisational systems link two or more organisations, enabling information sharing such as shipment tracking with suppliers and customers. They cross organisational boundaries rather than serving a single internal function.

Question 18Foundations of information systems and their role in organisations

Which of the following best describes a management information system (MIS)?

  1. A system that stores only external market data
  2. A system that provides managers with structured reports based on transaction data to support control and decision-making Correct answer.
  3. A system that automates physical manufacturing equipment
  4. A system that captures raw transactions at the point of sale

Explanation

An MIS draws on transaction data and other sources to generate structured summary and exception reports for managers, supporting planning and control at the managerial level. It differs from a TPS, which captures raw transactions.

Question 19Foundations of information systems and their role in organisations

A company's information system is designed so that its outputs are compared with planned targets and adjustments are automatically made to inputs. This illustrates which systems concept?

  1. Batch processing
  2. Open-loop operation
  3. Data redundancy
  4. Control through feedback Correct answer.

Explanation

Comparing outputs with targets and adjusting inputs accordingly is the essence of control through feedback, which allows a system to regulate itself toward desired goals. Open-loop systems lack this corrective feedback.

Question 20Foundations of information systems and their role in organisations

Which factor most directly explains why an organisation might adopt an enterprise resource planning (ERP) system?

  1. To restrict information to a single department only
  2. To integrate data and processes across departments into a single unified system Correct answer.
  3. To eliminate the need for any data entry by staff
  4. To replace all human decision-making with automation

Explanation

ERP systems integrate data and business processes across functional areas such as finance, HR and supply chain into a single unified platform, reducing fragmentation. This integration is the primary rationale for ERP adoption.

Question 21Foundations of information systems and their role in organisations

An organisation finds that its information system produces accurate data but managers still make poor decisions. Which explanation is most consistent with systems thinking?

  1. The system must be replaced entirely with a manual process.
  2. Decision quality is unrelated to the information provided.
  3. Information quality also depends on relevance, timeliness and presentation, not accuracy alone. Correct answer.
  4. Accurate data guarantees good decisions, so the managers must be at fault.

Explanation

Useful information must be relevant, timely, complete and appropriately presented as well as accurate. If managers receive accurate but irrelevant or poorly presented information, decision quality can still suffer. Systems thinking therefore examines the fit between information characteristics and decision needs.

Question 22Foundations of information systems and their role in organisations

Which statement best captures the difference between an open system and a closed system?

  1. An open system cannot produce outputs.
  2. An open system has no inputs, while a closed system has many.
  3. A closed system always uses more technology than an open system.
  4. An open system interacts with its environment, while a closed system does not. Correct answer.

Explanation

An open system exchanges inputs and outputs with its external environment, whereas a closed system is treated as isolated from environmental interaction. Most real organisations are open systems that respond to external conditions.

Question 23Foundations of information systems and their role in organisations

A government agency must ensure that its information systems comply with data protection law when handling citizens' records. Which consideration is most directly relevant to this requirement?

  1. Reducing the system's hardware cost regardless of risk
  2. Maximising the number of reports the system can generate
  3. Ensuring lawful processing, security and appropriate use of personal data Correct answer.
  4. Increasing the number of users with unrestricted access

Explanation

Compliance with data protection law requires lawful processing, adequate security and appropriate use and retention of personal data. These obligations shape how systems are designed and governed.

Question 24Foundations of information systems and their role in organisations

An analyst argues that a new system will succeed only if it is aligned with the organisation's structure, culture and strategy. This argument reflects which perspective on information systems?

  1. A perspective that considers only hardware performance
  2. A purely technical perspective that ignores organisational context
  3. A socio-technical perspective that considers both technology and organisational factors Correct answer.
  4. A perspective that treats systems as independent of people

Explanation

The socio-technical perspective holds that system success depends on the joint optimisation of technology and organisational elements such as structure, culture and strategy. It explains why technically sound systems can fail when organisational fit is poor.

Question 25Information systems strategy, governance and alignment with corporate objectives

In an IS strategy framework, which document most directly translates corporate objectives into a prioritised portfolio of information systems investments?

  1. The disaster recovery plan
  2. The network cabling standard
  3. The information systems strategic plan Correct answer.
  4. The service desk procedure manual

Explanation

The IS strategic plan is the instrument that links corporate goals to a prioritised, funded portfolio of systems initiatives, and it is approved at executive level. Operational and technical documents sit beneath it and govern delivery rather than direction. This alignment role is the defining purpose of IS strategy within governance.

Question 26Information systems strategy, governance and alignment with corporate objectives

A board delegates authority for approving IT capital expenditure above a defined threshold to a cross-functional committee. Which governance mechanism does this represent?

  1. A data protection impact assessment process
  2. An outsourced managed service contract
  3. An IT steering committee with delegated decision rights Correct answer.
  4. A change advisory board reviewing production changes

Explanation

Governance is fundamentally about decision rights and accountability, so delegating approval authority to a cross-functional steering committee is a governance design choice. The committee owns investment decisions and escalates only beyond its mandate. The other options are delivery, compliance or sourcing mechanisms rather than allocation of decision authority.

Question 27Information systems strategy, governance and alignment with corporate objectives

Which pairing of an IS governance archetype with its decision pattern is described correctly?

  1. IT duopoly: external regulators hold the decision right
  2. Business monarchy: business executives hold the decision right Correct answer.
  3. Anarchy: a single central IT unit holds the decision right
  4. Feudal: the board holds all decision rights centrally

Explanation

In the widely used governance archetype model, a business monarchy means business executives, individually or as a group, hold the decision right. A duopoly means business and IT jointly decide, anarchy means each local unit decides independently, and feudal means business unit leaders decide with limited central coordination. Matching the label to the decision pattern is the test of understanding.

Question 28Information systems strategy, governance and alignment with corporate objectives

An organisation's corporate strategy shifts to aggressive growth through acquisition. Which IS strategy response best demonstrates alignment?

  1. Deferring architecture decisions to each acquired company's IT team indefinitely
  2. Standardising on the legacy platform used by the largest existing business unit
  3. Prioritising integration-ready platforms and due diligence capability for acquired systems Correct answer.
  4. Freezing all systems investment until the acquisition programme is complete

Explanation

Alignment means the IS roadmap is derived from and supports the corporate strategy, so a growth-by-acquisition strategy calls for integration capability and repeatable due diligence. Freezing investment or indefinitely decentralising architecture would obstruct the strategy it is meant to serve. Alignment is judged by contribution to strategic objectives, not by technical preference.

Question 29Information systems strategy, governance and alignment with corporate objectives

Which characteristic most distinguishes strategic IS planning from tactical IS planning?

  1. Strategic planning is reviewed weekly; tactical planning is reviewed annually
  2. Strategic planning is prepared by the service desk; tactical planning is prepared by the board
  3. Strategic planning sets a multi-year direction and capability targets; tactical planning schedules delivery within that direction Correct answer.
  4. Strategic planning covers hardware only; tactical planning covers software only

Explanation

Strategic planning defines the long-term direction, capability targets and investment themes, while tactical planning converts those into project schedules, resourcing and milestones over a shorter horizon. The distinction lies in horizon and purpose, not in technology type or authorship. Confusing the two leads to plans that either lack direction or lack executable detail.

Question 30Information systems strategy, governance and alignment with corporate objectives

A newly appointed CIO finds that business units buy their own software with no central visibility. Which governance intervention most directly restores alignment while preserving business responsiveness?

  1. Introduce a demand management and investment approval process with defined thresholds and a shared catalogue Correct answer.
  2. Prohibit business units from purchasing any technology without exception
  3. Mandate that all business unit IT staff report to the CIO immediately
  4. Publish the IT budget to the organisation without changing any process

Explanation

Shadow IT is best addressed by making demand visible and channelling it through a governed intake with thresholds and approved options, which restores oversight without removing business agility. Centralising staff or banning purchases addresses symptoms and typically drives spending further underground. Transparency alone changes no decision rights.

Question 31Information systems strategy, governance and alignment with corporate objectives

Which metric best indicates whether IS investment is aligned with corporate objectives rather than merely efficient?

  1. The proportion of the IS portfolio traceable to approved corporate strategic objectives Correct answer.
  2. The number of change requests rejected per month
  3. The percentage of servers running the latest operating system patch
  4. The average number of tickets closed per service desk analyst

Explanation

Alignment is demonstrated by the traceability of investment to strategic objectives, which shows the portfolio is derived from corporate direction. Service desk throughput, patching and change rejection rates measure operational performance rather than strategic fit. Efficiency indicators can be excellent while the portfolio remains misaligned.

Question 32Information systems strategy, governance and alignment with corporate objectives

Under an IT governance framework that separates direction-setting from monitoring, which body typically sets direction while another assures conformance?

  1. The outsourcing vendor sets direction; the programme manager provides assurance
  2. The procurement team sets direction; the help desk provides assurance
  3. A governing board or IT steering committee sets direction; an audit or risk committee provides independent assurance Correct answer.
  4. The service desk sets direction; the change advisory board provides assurance

Explanation

Governance distinguishes the body that sets direction and approves investment from the body that independently assures conformance and risk management. Combining both in one operational group weakens independent oversight. Audit or risk committees exist precisely to provide that assurance to the board.

Question 33Information systems strategy, governance and alignment with corporate objectives

A firm adopts a 'fast follower' business strategy in a technology-intensive market. Which IS posture is most consistent with that strategy?

  1. Avoiding all new technology until it is obsolete in the market
  2. Investing heavily in pioneering unproven technologies ahead of all competitors
  3. Maintaining strong technology scanning and rapid adoption capability rather than funding first-mover innovation Correct answer.
  4. Outsourcing all technology decisions to the lowest-cost provider

Explanation

A fast follower seeks to avoid pioneering costs while capturing early benefits, so the IS posture emphasises technology intelligence and fast, low-risk adoption. Pioneering investment belongs to a first-mover strategy, and refusing new technology abandons the follower advantage. The IS posture must mirror the chosen competitive stance.

Question 34Information systems strategy, governance and alignment with corporate objectives

Which statement best captures the concept of business-IT maturity in an alignment assessment?

  1. Maturity is measured solely by the size of the IT budget relative to revenue
  2. Maturity is reached when all legacy systems have been replaced by cloud services
  3. Maturity reflects the increasing sophistication of governance, planning and value delivery practices over time Correct answer.
  4. Maturity is achieved once IT reports to the chief executive officer

Explanation

Maturity models describe progressive sophistication in how governance, planning, partnership and value delivery are practised, not a single structural or technology milestone. Replacing systems or changing reporting lines may support maturity but do not define it. Budget size measures scale, not capability.

Question 35Information systems strategy, governance and alignment with corporate objectives

During annual planning, a hospital's corporate objective is improved patient outcomes. Which IS objective most clearly derives from it?

  1. Reduce the average age of the data centre server fleet
  2. Enable clinicians with integrated decision-support and shared patient records at the point of care Correct answer.
  3. Increase the proportion of incidents resolved at first contact
  4. Consolidate software licences to lower unit costs

Explanation

A derived IS objective states how information systems will contribute to the corporate objective, here by improving clinical decision quality and record access. Server refresh, licence consolidation and first-contact resolution are worthwhile internal efficiency targets but are not traceable to patient outcomes. Derivation, not generic improvement, is what alignment requires.

Question 36Information systems strategy, governance and alignment with corporate objectives

Which governance arrangement best balances central standards with local responsiveness in a diversified group?

  1. Full centralisation of all technology decisions in the group IT function
  2. Federated governance with centrally set standards and delegated local execution within them Correct answer.
  3. Governance assigned entirely to an external consulting firm
  4. Full decentralisation with no group-level standards at all

Explanation

Federated governance sets non-negotiable standards centrally while delegating execution and local adaptation, which captures scale benefits without stifling business units. Full centralisation or full decentralisation trades one failure mode for the other. External firms can advise but cannot hold the organisation's accountability.

Question 37Information systems strategy, governance and alignment with corporate objectives

Which artefact is the primary output of an enterprise architecture function operating within IS strategy?

  1. A user acceptance test script
  2. A vendor price comparison spreadsheet
  3. A target-state architecture with a transition roadmap linking business capabilities to systems Correct answer.
  4. A daily backup completion log

Explanation

Enterprise architecture produces a description of the target state and a roadmap for moving from the current to the target state in line with business capabilities. Backup logs, price comparisons and test scripts are operational artefacts produced elsewhere. Architecture's strategic value lies in guiding investment and standardisation.

Question 38Information systems strategy, governance and alignment with corporate objectives

A regulator introduces mandatory data residency rules. How should the IS strategy respond to remain aligned with both compliance and business goals?

  1. Ignore the rules until an enforcement action is received
  2. Delegate the decision to individual application owners without guidance
  3. Abandon all cloud adoption permanently
  4. Incorporate residency requirements into architecture principles and the investment roadmap Correct answer.

Explanation

External compliance obligations are inputs to IS strategy, and the correct response is to embed them into architecture principles, standards and the funded roadmap. Ignoring them creates legal and reputational exposure, and unguided local decisions produce inconsistent compliance. Abandoning cloud entirely overstates the constraint and may harm competitiveness.

Question 39Information systems strategy, governance and alignment with corporate objectives

Which statement best explains why an IS steering committee should include business executives rather than IT managers alone?

  1. Including business executives reduces the need for any IT documentation
  2. Business executives are legally required to approve all software purchases
  3. Business representation ensures investment decisions reflect strategic value and business priorities Correct answer.
  4. IT managers lack the technical knowledge to evaluate system proposals

Explanation

Governance works when decision-makers own the outcomes, and business executives bring the strategic perspective needed to prioritise value. IT managers are typically the technical experts, so the claim that they lack technical knowledge is inverted. Legal requirements and documentation needs are unrelated to committee composition.

Question 40Information systems strategy, governance and alignment with corporate objectives

An organisation measures IT value only by cost reduction. What is the most significant governance consequence of this narrow view?

  1. Innovation and revenue-enabling investments are systematically underfunded Correct answer.
  2. Business units gain greater autonomy over technology choices
  3. IT costs automatically fall below industry benchmarks
  4. Regulatory compliance improves without additional effort

Explanation

When value is defined solely as cost reduction, proposals that create revenue or strategic capability struggle to justify funding against cost-cutting alternatives. The portfolio drifts toward maintenance and away from innovation. The other outcomes do not follow from a cost-only value lens.

Question 41Information systems strategy, governance and alignment with corporate objectives

Which is the clearest indicator that IS strategy is genuinely aligned with corporate objectives rather than merely documented alongside them?

  1. The strategy was written by the same author as the corporate plan
  2. The strategy document uses the same wording as the corporate plan
  3. The strategy was approved at the same meeting as the corporate plan
  4. Funding decisions and project prioritisation consistently follow the stated strategic themes Correct answer.

Explanation

Alignment is behavioural and evidenced by resource allocation, so prioritisation and funding must follow the strategic themes. Shared wording, authorship or approval timing are cosmetic signals that can coexist with completely different spending patterns. Governance tests alignment through decisions, not documents.

Question 42Information systems strategy, governance and alignment with corporate objectives

In a governance model, what is the purpose of separating the roles of 'IT demand' and 'IT supply'?

  1. To ensure business requirements are articulated independently of the teams that build and run solutions Correct answer.
  2. To double the number of staff involved in every project
  3. To transfer all accountability for delivery to the business
  4. To eliminate the need for service level agreements

Explanation

Separating demand from supply prevents the provider from defining its own requirements and creates a clear customer-provider relationship with accountability on both sides. It is a role separation, not a headcount strategy, and accountability for outcomes remains shared. Service level agreements become more meaningful, not unnecessary.

Question 43Information systems strategy, governance and alignment with corporate objectives

Which factor most commonly causes IS strategy to fail in practice even when the document itself is well written?

  1. Inclusion of a glossary of technical terms
  2. Weak linkage to budgeting and performance management processes Correct answer.
  3. Circulation of the strategy to middle management
  4. Use of too many diagrams in the strategy document

Explanation

Strategy fails when it is disconnected from the budgeting and performance cycles that actually allocate resources and measure progress. Presentation choices and wider circulation generally help rather than harm. Execution mechanisms, not document style, determine whether strategy changes behaviour.

Question 44Information systems strategy, governance and alignment with corporate objectives

A board wants assurance that major IT programmes will deliver expected benefits. Which governance control is most appropriate?

  1. Annual renewal of all software maintenance contracts
  2. Weekly rotation of project managers between programmes
  3. Monthly publication of the IT organisational chart
  4. Stage-gate reviews with defined benefit-realisation criteria before further funding is released Correct answer.

Explanation

Stage-gate reviews with explicit benefit criteria give the board decision points at which funding can be continued, redirected or stopped based on evidence. Organisational charts, contract renewals and manager rotation do not test benefit delivery. Benefit realisation must be built into the investment lifecycle to be governable.

Question 45Information systems strategy, governance and alignment with corporate objectives

Which situation most clearly indicates a breakdown in IT decision rights rather than a delivery problem?

  1. A server fails and is restored from backup
  2. A vendor delivers hardware later than the contract states
  3. Two committees each believe they hold final approval authority for the same investment category Correct answer.
  4. A project misses its testing milestone by two weeks

Explanation

Overlapping or ambiguous decision rights are a governance defect because nobody can say who legitimately decides, which causes delay and conflict. Missed milestones, hardware failure and late delivery are delivery or supplier performance issues. Governance diagnosis focuses on authority, accountability and escalation paths.

Question 46Information systems strategy, governance and alignment with corporate objectives

Which approach best embeds IT governance into corporate governance rather than treating it as a separate technical concern?

  1. Delegating all IT oversight to the internal service desk
  2. Reporting IT risk and performance through the same board risk and audit structures as other enterprise risks Correct answer.
  3. Restricting IT performance reporting to the IT department intranet
  4. Creating a standalone IT committee that never reports to the board

Explanation

IT governance becomes part of corporate governance when IT risk and performance are reported through the board's existing risk and audit channels alongside other enterprise risks. Isolated committees, service desk delegation and internal-only reporting keep IT outside mainstream oversight. Integration of reporting lines is the practical test.

Question 47Information systems strategy, governance and alignment with corporate objectives

An organisation's IS strategy is heavily centralised, but its corporate strategy emphasises rapid local market experimentation. What is the most likely consequence?

  1. Business units bypass central IT to move at the pace their markets demand Correct answer.
  2. Central IT automatically accelerates to match local market speed
  3. Corporate strategy is revised to abandon local markets
  4. Local experimentation stops because units accept the constraint

Explanation

When the IS operating model conflicts with the corporate strategy's pace and autonomy needs, business units typically route around central IT, producing shadow IT and duplication. Central IT does not automatically acquire local market agility, and neither withdrawal nor strategy reversal is a necessary outcome. The mismatch itself is the governance problem to resolve.

Question 48Information systems strategy, governance and alignment with corporate objectives

Which element is essential for an IS strategy to be actionable by delivery teams?

  1. A list of all IT staff qualifications
  2. Clearly stated principles, priorities and constraints that guide day-to-day design choices Correct answer.
  3. A historical account of past project failures
  4. A complete inventory of every installed application version

Explanation

Actionable strategy supplies principles, priorities and constraints that teams can apply when making design and investment choices without escalating every decision. Inventories, staff records and failure histories may inform context but do not direct decisions. Strategy becomes operational through guidance, not documentation volume.

Question 49Corporate governance, risk management and IT controls

Under the COSO Internal Control framework, which component provides the foundation for the other four components of internal control?

  1. Information and communication
  2. Monitoring activities
  3. Control environment Correct answer.
  4. Risk assessment

Explanation

The control environment is the set of standards, processes and structures that provide the basis for carrying out internal control across the organisation, and it underpins the other components. Risk assessment, information and communication, and monitoring all operate within the tone set by the control environment.

Question 50Corporate governance, risk management and IT controls

In the three lines model of corporate governance, which group forms the first line?

  1. The external auditor
  2. Operational management who own and manage risk Correct answer.
  3. The internal audit function
  4. The board and its committees

Explanation

The first line consists of operational management, who own and manage risk directly in the delivery of products and services. The second line provides oversight and challenge, while internal audit forms the third line with independent assurance.