When dealing with the administration of the IT function and the segregation of IT duties
A) in large organizations, management should assign technology issues to outside consultants.
B) programmers should investigate all security breaches.
C) the board of directors should not get involved in IT decisions since it is a routine function handled by middle management.
D) in complex environments, management may establish IT steering committees.

Question

Quizplus · Accepted Answer

In complex environments, where the IT function is large and varied, it is best to establish IT steering committees to oversee the administration and segregation of IT duties. This helps to ensure that tasks and responsibilities are properly assigned, and that all necessary security measures are in place. Management can still be involved in the decision-making process, but the IT steering committee provides an additional layer of oversight and accountability. A) is not a good choice because outsourcing all technology issues to outside consultants would not provide sufficient oversight and may be cost-prohibitive. B) is not a good choice because programmers should not investigate security breaches as this would compromise the segregation of duties principle. C) is not a good choice because the board of directors should be involved in IT decisions to ensure proper governance and oversight.

When Dealing with the Administration of the IT Function and the Segregation