美国伊利诺斯州绍姆堡—The benefits of good 治理 systems are widely acknowledged, but often 治理 programs at smaller organizations are nonexistent or immature. Small and medium sized enterprises (SMEs) often deal with constraints such as limited IT resources and smaller budgets, and may have unique needs for their core business and priorities. A new guide from global technology association ISACA, COBIT® 适用于中小型澳门赌场官方下载, provides guidance for SMEs on developing an enterprise 治理 system for information and technology (I&T) tailored especially to their unique needs.
中小澳门赌场官方下载COBIT explains the core model and 组件s of the globally recognized COBIT framework, illuminates the key 治理 and management 客观的s that are most relevant to SMEs, and walks SMEs through the fundamentals of starting and implementing an I&T治理计划. It also provides detailed COBIT guidance specific to SMEs by domain, 客观的, 组件, 活动, 能力等级和度量. 除了, the guide features mechanisms to help a SME including a 治理 system design workflow, 适用性评估, COBIT的目标是级联映射表, 一个带有详细步骤的实际示例, and descriptions of SME roles and organizational structures.
“There is no magic formula for all small and medium enterprises to follow when it comes to developing an I&T 治理 system,” says Lisa Villanueva, ISACA IT 治理 Professional Practices Lead. “然而, by using tailored resources and a 治理 system design workflow, SMEs can thoughtfully develop an actionable road map for developing a 治理 system that can help guide them through the process and ultimately help them design and implement a system tailored especially to their needs.”
Some of the 活动 outlined in the detailed guidance include:
- Evaluate the 治理 system—Consider external regulations, laws and contractual obligations and determine how they should be applied within the 治理 of enterprise I&T.
- Understand enterprise context and direction—Develop and maintain an understanding of the current way of working: the operational environment, 澳门赌场官方下载架构(流程), data, 应用和技术领域), 组织文化, 以及当前的挑战.
- Initiate a program—Appoint a dedicated manager for the program, with the commensurate competencies and skills to manage the program effectively and efficiently.
- 监控, 控制, and report on the program outcomes—Manage program performance against key criteria (e.g., 范围, 时间表, 质量, 利益实现, 成本, 风险, 速度), identify deviations from the plan and take timely remedial action when required.
中小澳门赌场官方下载COBIT is geared toward organizations with up to 250 full- time employees, in which 30 to 70 employees work with IT systems and services, 包括业务经理, 专业人员, IT经理, 质量或安全专业人员, 内部审计师. The guidance reflects that enterprises of this size may have limited in-house IT skills and/or capacity, 缺乏复杂的IT基础设施, 有成本意识, 有短暂的控制力, and may need to outsource more complex tasks.
中小澳门赌场官方下载COBIT 可在以下网址下载 http://store.rockmark.net/s/store#/store/browse/detail/a2S4w000004L2noEAC. Additional COBIT resources and publications can be found at tqr.rockmark.net/resources/cobit.
关于ISACA
50多年来，ISACA® (tqr.rockmark.net) has advanced the best talent, expertise and learning in technology. ISACA为个人提供知识, 凭证, education and community to progress their careers and transform their organizations, and enables enterprises to train and build 质量 teams. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in information security, 治理, 保证, 风险 and privacy to drive innovation through technology. It has a presence in 188 countries, including more than 220 chapters worldwide. In 2020, ISACA发起了One In Tech, a philanthropic foundation that supports IT education and career pathways for under-resourced, 弱势群体.
Twitter: www.推特.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.脸谱网.com/ISACAGlobal
Instagram: www.instagram.com/isacanews
媒体联系人
艾米丽·范·坎普，+1.847.385.7223, communications@rockmark.net
克里斯汀·克辛格，+1.847.660.5554, communications@rockmark.net
