基于COBIT的信息技术外包风险管理.pdfVIP

第 31卷 第 5期 技 术 与 创 新 管 理 V ol. 31 No5 2010年 9月 TECHNOLOGY AND INNOVAT ION MANAGEMENT Sept2010 COBIT * 张强林, 邵丽萍 ( , 1000 ) : 市场经济的发展和竞争的激烈, 对企业的信息技术水平 出了更高的要求, 信息技术外包已经成为企业 升信息化程度的重要途径, 并在社会的各 个行业得到广泛的应用, 然而, 企业选择信息技术外包, 利益和风险并存, 规避风险, 获取利益, 需要借助有效的风险控制结合 COB IT ( Control Object for Inform ation and Related Technology, 信息及相关技术的控制目标)理论, 分析企业信息技术外包中的风险, 并结合信息技术外包的特点, 出了信息技 术外包的风险管理方法 : COB IT; 信息技术外包; 外包服务供应商; 风险管理 : F 270. 7 : A : 1672- 7312( 2010) 05- 0572- 0 The IT Outsourcing RiskM anagement Based on COBIT ZHANG Q ianglin, SHAO L ip ing (School of E conom ics M anag em ent, B e ij ing J iaotong Un iv er sity, B e ij ing 1000 , Ch ina) Abstract: IT outsourcing has been w idely used in all sectors in our life. H owever, the IT outsourcing has m erits and risks together. E ffective risk control is needed in order to avoid risks and ach ieve them erits. In this paper, the COBIT ( Control Object for Inform ation and Related Technology) theory is used to analyze the risk during the IT outsourcing and measures of IT outsourcing m anagem en t are put forw ard on the basis of the characteristics of the IT ou tsourcing. K ey words: COBIT; Inform ation Technology Outsourcing; outsourcing service provider; risk managem ent 1 2 2. 1 COBIT , , COB1T( ControlObjectives Information and Relat edTechnology) ISACA ( Information Systems Aud it and ControlAssoci , ation)( Control Objec , !∀,