以信息安全为基线的IT运维服务多体系融合管理研究与实践

Research and Practice on multi system integration management of IT operation and maintenance services based on Information Security

玉溪供电局面临着多种IT运维服务管理体系要求:南方电网自身管理要求、ISO27001、ITIL、ITSS,虽然适时引入相关体系,解决了IT服务管理发展的中一些不足的地方,但多个运维服务管理体系的存在,给玉溪供电局信息中心的运维服务管理带来了巨大的挑战。目前缺乏ISO27001、ITIL、ITSS行业最佳实践,多个体系存在,导致运维服务存在重复性工作,需要耗费大量的人力,本文提出了"以信息安全为基线"的IT运维服务多体系融合概念,从IT运维服务工作的落脚点出发,开展体系融合研究,并取得了一定的效果。

Yuxi power supply bureau is facing the various requirements of IT service management system:Southern Power Grid's own management requirements,ISO27001,ITIL,ITSS,although the introduction of relevant system timely,to solve some of the inadequacies of the IT service management development,but a number of maintenance service management system existence,has brought great challenges to the operation and maintenance service management Yuxi power supply bureau information center.At present,the lack of ISO27001 ITIL,ITSS industry best practices,the existence of multiple system,leading to the existence of repetitive work operation services,requires a lot of manpower,this paper puts forward the concept of information security baseline"IT service system integration,from the IT operation and maintenance work of research goal,system integration.And has achieved a certain effect.