基于风险驱动的IT服务管理体系构建

Construction of Risk-driven IT Service Management System

当前,许多组织常常借鉴ISO 20000服务管理体系来管理组织的IT服务。然而,由于ISO 20000是新生事物,组织难以构建适合自身需要的IT服务管理体系。为此,可从组织实现IT服务可能面临的风险人手,通过管理的体系控制、过程的方法控制、业务的流程控制和价值链的关系控制来处理IT服务风险,进而构建符合实践标准的IT服务管理体系,确保组织业务的正常开展。

Currently, many organizations often draw ISO 20000 to manage IT services of the organization. However, since ISO 20000 is a new thing, the organization is difficult to build their needs for IT Service Management System. To do this, this paper starts from the organization＇s IT operations, through the management of the system control process to control, process control and business value chain relationships to deal with the risk of IT services. This method can be constructed consistent with standards of practice of IT service management system to ensure the normal conduct of business organization.