GB/T 34960.2-2017Information technology service—Governance—Part 2: Implementation guide (English PDF)

1 Scope

GB/T 34960 This section presents the implementation of the general requirements of information technology governance (hereinafter referred to as IT governance), the implementation of the analysis

The environmental factors of IT governance stipulate the implementation framework of IT governance, implementation environment and implementation process, and define the top-level design governance and management system

Governance and resource management requirements.

This section applies to.

a) Establish an organization's IT governance implementation framework and define the methodologies and processes for implementation;

b) Implementation of IT governance within the organization;

c) Guidance on the implementation of IT governance related software or solutions;

d) Third-party guidance on IT governance evaluation.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article

Pieces. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 34960.1 Information technology services governance Part 1. General requirements

Information technology - Security technology - Information security - Control practice guide

GB/T 28827.1-2012 Information technology services operation and maintenance Part 1. General requirements

3 Terms and definitions

GB/T 34960.1 defined terms and definitions apply to this document.

4 governance implementation framework

The framework of IT governance implementation includes the implementation environment, implementation process and governance domain of governance, as shown in Figure 1.

Implementation environment includes the organization's internal and external environment and contributing factors.

The implementation process provides a methodology for the implementation of IT governance, including co-ordination and planning, structuring and operation, monitoring and evaluation, improvement and optimization.

Governance domain defines the object of IT governance, including top-level design, management system and resources. Top-level design includes strategy, organization and architecture

Management system includes quality management, project management, investment management, service management, business continuity management, information security management, risk management, supplier

Management, asset management and other management, resources including infrastructure, applications and data.

The organization shall carry out the implementation of IT governance in the light of the implementation process and the governance domain in light of the analysis of the implementation environment.