IT Governance e ISO/IEC Susana Velez

Transcrição

1 IT Governance e ISO/IEC Susana Velez

2 Desafios de TI Manter TI disponível Entregar valor aos clientes Gerir os custos de TI Gerir a complexidade Alinhar TI com o negócio Garantir conformidade com a regulamentação Gerir a segurança

3 O que é Governance? Conjunto de responsabilidades e práticas exercidas pela gestão com o objectivo de: Dar direcção estratégica; Garantir que os objectivos da organização são atingidos; Garantir que os riscos são geridos apropriadamente; Garantir que os recursos da organização são usados de forma responsável.

4 Benefícios de IT Governance Confiança da gestão de topo Maior capacidade de resposta das TI para o negócio Maior retorno do investimento Serviços mais fiáveis Maior transparência

5 Pilares de IT Governance IT GOVERNANCE Alinhamento Estratégico Entrega de valor Gestão de recursos Gestão de risco Medição de performance

6 ISO Edição 2011 Customers (and other interested parties) Management responsibility Establish the SMS Service Management System (SMS) Governance of processes operated by other parties Documentation Resource Customers (and other interested parties) Service Requirements Design and transition of new or changed services Capacity Service continuity & availability Resolution processes Incident and service request Problem Service delivery processes Service level Service reporting Control processes Configuration Change Release and deployment Information security Budgeting & accounting for services Relationship processes Business relationship Supplier Services

7 Mapeamento COBIT com ISO COBIT (PO) ISO PO1 Define a strategic IT plan. PO3 Determine technological direction. PO4 Define the IT processes, organisation and relationships. PO6 Communicate aims and direction. PO7 Manage IT human resources. PO8 Manage quality. 4.1 Management responsibility 5 Design and transition of new or changed services 4.5 Establish and improve the SMS 4.1 Management responsibility 4.4 Resource 4.5 Establish and improve the SMS

8 Mapeamento COBIT com ISO COBIT (AI) ISO AI4 Enable operation and use. AI5 Procure IT resources. AI6 Manage changes. AI7 Install and accredit solutions and changes 9.3 Release and deployment 7.2 Supplier 9.2 Change 9.3 Release and deployment

9 Mapeamento COBIT com ISO COBIT (DS) ISO DS1 Define and manage service levels. DS2 Manage third-party services. 6.1 Service level 6.2 Service reporting 4.2 Governance of processes operated by other parties DS3 Manage performance and capacity. DS4 Ensure continuous service. DS5 Ensure systems security. DS6 Identify and allocate costs. 6.5 Capacity 6.3 Service continuity and availability 6.6 Information security 6.4 Budgeting and accounting for services

10 Mapeamento COBIT com ISO COBIT (DS) ISO DS8 Manage service desk and incidents. DS9 Manage the configuration. DS10 Manage problems. DS12 Manage the physical environment. DS13 Manage operations. 8.1 Incident and service request 9.1 Configuration 8.2 Problem 6.6 Information security 6.6 Information security 6.3 Service continuity and availability

11 Mapeamento COBIT com ISO COBIT (ME) ISO ME1 Monitor and evaluate IT performance. ME2 Monitor and evaluate internal control. ME4 Provide IT governance. 4.5 Establish and improve the SMS 4.5 Establish and improve the SMS 4.5 Establish and improve the SMS

12 Mapeamento COBIT com ISO COBIT - Domínios Nº de Relações com ISO Plan & Organize 10 Processos Acquire & Implement 7 Processos Deliver & Support 13 Processos Monitor & Evaluate 4 Processos

13 Conclusões Processos do COBIT com mapeamento directo com processos ISO Processos do COBIT com mapeamento em diferentes processos ISO Processos do COBIT que não têm mapeamento nos processos ISO 2000 A norma ISO suporta a implementação dos princípios de IT Governance