Chapter 9: Governance of the Information Systems Organization Flashcards

1
Q

The process whereby the changing practices and expectation of consumers, shaped by the wide adoption of digital technologies in everyday life, will influence the IT‐related activities of workers and managers in organizations

A

IT consumerization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

aligning behavior with business goals through empowerment and monitoring.

A

Governance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Empowerment comes from?

A

granting the right to make decisions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Monitoring comes from?

A

evaluating performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the four (4) perspectives of IT governance?

A
  1. Distribution of Decision Rights
  2. Interaction and Allocation of Decision Rights in BU
  3. Platform-based Governance
  4. Control Structures for Governance Guidelines.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

shifts the focus from well‐bounded organizational contexts to contexts beyond organizational or industry boundaries in order to leverage digital ecosystems and IT consumerization

A

platform‐based governance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

bring together all staff, hardware, software, data, and processing into a single location

A

centralized IS organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Scatter staff, hardware, software, data, and processing across different locations to address local business needs.

A

Decentralized IS organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A hybrid of the Decentralzied and Centralized IS Organizations that aims to distribute power, hardware, software, data, and personnel between a central IS group and IS in business units.

A

Federalism

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the nine (9) advantages of Centralization

A
  1. Global standards; common data
  2. “One voice” for negotiating supplier contracts
  3. Faster decision making because fewer people are involved
  4. Greater leverage in deploying strategic IT initiatives
  5. Economies of scale and a shared cost structure
  6. Access to large capacity
  7. Improved recruitment and training of IT professionals
  8. Improved control of security and databases
  9. Consistent with centralized enterprise structure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the five (5) disadvantages of Centralization

A
  1. Technology may not meet local needs
  2. Slow support for strategic initiatives
  3. Schism between business and IT organization
  4. “Us versus them” mentality when technology problems occur
  5. Lack of business unit control over overhead costs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the six (6) advantages of Decentralization

A
  1. Technology customized to local business needs
  2. Close partnership between IT and business units
  3. Greater flexibility
  4. Reduced telecommunication costs
  5. Consistency with decentralized enterprise structure
  6. Business unit control of overhead costs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the five (5) disadvantages of Decentralization

A
  1. Difficulty in maintaining global standards and consistent data
  2. Higher infrastructure costs
  3. Difficulty in negotiating preferential supplier agreements
  4. Loss of control
  5. Duplication of staff and data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the 10 advantages of Federalism

A
  1. IT Vision and Leadership
  2. Groupwide IT Strategy and Architecture
  3. Economies of Scale
  4. COntrol of Standards
  5. Critical Mass of SKills
  6. Users control IT priorities
  7. Business Units have Ownership
  8. Responsive to Business unit needs
  9. Strategic Control
  10. Synergy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False

It is important to match the manager’s decision rights with his or her accountability for a decision.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Mismatching the managers decision rights with his or her account ability results in.

A

either an oversupply of IT resources or the inability of IT to meet business demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two (2) major components of IT governance?

A
  1. Assignment of decision‐making authority and responsibility
  2. Decision‐making mechanisms
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the five (5) applicable categories of IT Decisions

A
  1. IT Principles
  2. IT Architecture
  3. IT Infrastructure Strategies
  4. Business Application Needs
  5. IT Investment and Prioritization
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

This IT decision category determines what IT assets are needed

A

IT Principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

This IT decision category determines how to structure IT assets

A

IT Architecture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

This IT decision category determines how to build IT Assets

A

IT Infrastructure Stratagies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

This IT decision category determines how to acquire, implement, and maintain IT

A

Business Application Needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

This IT decision category determines how much to invest and where to invest IT assets

A

IT Investment and Prioritization

24
Q

A pattern resulting from allocation of decision rights

A

Archetype

25
Q

What are the six (6) political Archetypes

A
  1. Business Monarchy
  2. IT Monarchy
  3. Feudal
  4. Federal
  5. IT Duopoly
  6. Anarchy
26
Q

This political archetype allocates decisions rights to a group of, or individual, business executives (i.e., CxOs). Includes committees comprised of senior business executives (may include CIO). Excludes IT executives acting independently

A

Business Monarchy

27
Q

This political archetype allocates decisions rights to individuals or groups of IT Executives

A

IT Monarchy

28
Q

This political archetype allocates decisions rights to Business Unit Leaders and key process owners or thier delegates

A

Feudal

29
Q

This political archetype allocates decisions rights to C‐level executives and at least one other business group (e.g., CxO and BU leaders)—IT executives may be an additional participant. Equivalent to a country and its states working together

A

Federal

30
Q

This political archetype allocates decisions rights to IT executives and one other group

A

IT Duopoly

31
Q

This political archetype allocates decisions rights to each individual user

A

Anarchy

32
Q

a committee composed of key stakeholders or experts who provide guidance on important IT issues

A

Steering Committee

33
Q

Steering committees work especially well with which political archetype , which calls for joint participation of IT and business leaders in the decision‐making process

A

federal archetype

34
Q

This level of steering committee provides strategic direction and funding authority for major IT projects and ensures that adequate resources be allocated to the IS organization for achieving strategic goals

A

The highest Level which reports to the BOD or the CEO

35
Q

This level steering committees provide a forum for business leaders to present their IT needs and to offer input and direction about the support they receive from IT operations

A

Lower Level Steering Commitees

36
Q

A layered architecture of digital technology combined with a governance model.

A

Digital Platform

37
Q

The ability of any self‐contained system to create, generate, or produce a new output, structure, or behavior without any input from the originator of the system

A

Generativity

38
Q

System that consists of self‐interested, self‐organizing, and autonomous digital entities; System of entities that is nourished by the significant impacts of the large variety of resources available from individuals, organizational units, and outside services.

A

Digital Ecosystems

39
Q

enacted in the United States in 2002 to increase regulatory visibility and accountability of public companies and their financial health

A

Sarbanes-Oxley Act of 2002

40
Q

According to SoX, CFOs and CEOs must do what?

A

Personally certify and be accountable for their firms’ financial records and accounting (Section 302)

41
Q

According to SoX Auditors must do what?

A

Auditors must certify the underlying controls and processes that are used to compile the financial results of a company (Section 404)

42
Q

According to SoX, Companies must do what?

A

Companies must provide real‐time disclosures of any events that may affect their stock price or financial performance within a 48‐hour period (Section 409)

43
Q

What five (5) control weaknesses were repeatedly uncovered by SOX auditors?

A
  1. Failure to segregate duties
  2. Lack of proper oversight
  3. Inadequate review of audit logs
  4. Failure to identify abnormal transactions
  5. Lack of understanding of key system configurations.
44
Q

Name three (3) other frameworks used to implement SoX

A
  1. Committee of Sponsoring Organizations of the Treadway Commission (COSO)
  2. Control Objectives for Information and Related Technology (COBIT)
  3. Information Technology Infrastructure Library (ITIL)
45
Q

What are the three (3) control objectives for management and auditors that focused on addressing risks to internal control as put fourth by the COSO

A
  1. Operations
  2. Compliance
  3. Financial Reporting
46
Q

To make sure a company meets its control objectives, what five (5) essential control components did COSO establish?

A
  1. Create control environement that addresses the overall culture of the company
  2. Assess the most critical risks to internal controls
  3. Create control structures that outline important processes and guidelines
  4. Provide clear information about employees’ responsibilities and procedures to be followed
  5. Monitor internal controls
47
Q

This governance framework provides guidelines about who in the organization should make decisions about IT processes, IT resources, and information to a company’s strategies and objectives

A

COBIT

48
Q

The COBIT governance framework defined four (4) major domain for risks?

A
  1. Planning and organization
  2. Acquisition and implementation
  3. Delivery and support
  4. Monitoring and evaluating
49
Q

A set of concepts and techniques for managing IT infrastructure, development, and operations, developed in the United Kingdom

A

ITIL

50
Q

What are the six (6) actics that CIOs can use in the implementation of SoX

A
  1. Knowledge Building
  2. Knowledge Deployement
  3. Innovation Directive
  4. Mobilization
  5. Standardization
  6. Subsidy
51
Q

This tactic seeks to establish a knowledge base to implement SoX

A

Knowledge Building

52
Q

This tactic seeks to Disseminate knowledge about SoX and develop an understanding of this knowledge by management and other organizational members

A

Knowledge Dissimination

53
Q

This tactic seeks to organize for implementing SoX and announce the approach

A

Innovation Directive

54
Q

This tactic seeks to Persuade decentralized players and subsidiaries to participate in SoX implementation

A

Mobilization

55
Q

This tactic seeks to negotiate agreements between organizational members to facilitate the SoX implementation

A

Standardization

56
Q

This tactic seeks to Fund the implementers’ costs during the SoX implementation and the users’ costs during its deployment and use

A

Subsidy