
Иванов Р.В. (Методика внедрения ИС) / ЛР 8 (Эссе) / Cobit-41_rus_Blank
.pdf4.
,
, .
,
.
.
.
,
.
,
. ,
,
.
5.
,
,
,
. ,
,
.
,
.
,
,
. ,
.
,
, .

ME 4.
, , , .
,
.
.
,
,
.
,
,
.
,
.
.
( ).
(
).
.
ME 4.1.
.
, , ,
. ,
, ,
.
.
ME 4.2.
, , .
.
,
, .
,
. ,
.
ME 4.3.
, , ,
.
, ,
, ,
, ,
,
, ,
.
, , ,
,
.
ME 4.4.
,
.
.
ME 4.5.
,
. ,
,
.
ME 4.6.
( ) ,
. ,
,
.

, .
.
ME 4.7.
( )
, ,
, , .
.
, , ,
»
,
,
:
0.
.
, .
1.
,
.
.
,
.
.
, .
2. ,
.
,
, ,
.
.
,
.
.
. ,
.
3.
.
,
.
, .
, .
. ,
,
. ,
,
.
4.
. , ,
,
. .
.
,
.
, .
, .
, ,
,
.
.
.
,
.
5.
,
, .
.
, ,
. ,
.
,
.
, ,
.
.
. , ,
, , .
,
.
.
1
,
.
, ( )
. ,
COBIT ,
.

2
ISO 17799 — , ,
, .
ISO 277001 — « —
», , BS7799 2.
, ISO/IEC 9001 14001.
ISO 9001:2000 — ,
. ISO 9001:2000,
, ,
,
.
(Automated application control) —
, ( ).
(Root cause analysis) —
, ,
.
(IT Infrastructure Library, ITIL) —
.
(Business process) — . .
(Data owners) — , , ,
,
.
(Internal control) — , ,
,
, ,
.
, (Capability) —
.
, (Chief executive officer, CEO) —
.
(Activity) — ,
COBIT.
(Chief information officer, CIO)
— , .
(chief knowledge officer, ), , . .
.
(System development life cycle, SDLC) —
.
, , ,
, , , ,
, .
(Maturity) — , ,
, .
(Authentication) —
( , , )
.
,
.
(Dashboard) —
.
(IT investment dashboard) —
,
.
(Information architecture) —
( ). . .
(IT) — ,
, , , ,
.
(Informed) — , ,
( ).
(IT architecture) —
, ,
.
(Enterprise architecture for IT) —
,
,
.
(IT incident) — ,
, , (
ITIL).
(Key goal indicator, KGI) — ,
, ,
.
(Key performance indicator, KPI) — ,
, . — «
», , , , ,
, . ,
,
.
(Key management practices) — ,
.
(Committee of Sponsoring Organisations of the Treadway Commission, COSO) — «
— » 1992
. . www.coso.org
(Consulted) — , ,
( ).
(Access control) — ,
.
.
(Detective control) — ,
( ), ,
, ,
.
(Enterprise architecture) —
( ,
), ,
.