我们都曾经注意过也使用过各式各样的成熟度模型,以反映客户IT治理成熟水平、安全运营管理水平,甚至按需计算成熟水平。CoBIT中的成熟度模型如下所示,是很多大型咨询公司使用的成熟模型的基础。
它将IT控制水平分为6个级别,即:
0 不存在 Non-existent. Complete lack of any recognisable processes. The enterprise has not even recognised that there is an issue to be addressed.
1 初始级 Initial. There is evidence that the enterprise has recognised that the issues exist and need to be addressed. There are, however, no standardised processes; instead there are ad hoc approaches that tend to be applied on an individual or case-by-case basis. The overall approach to management is disorganised.
2 可重复级 Repeatable. Processes have developed to the stage where similar procedures are followed by different people undertaking the same task. There is no formal training or communication of standard procedures, and responsibility is left to the individual. There is a high degree of reliance on the knowledge of individuals and, therefore, errors are likely. Read the rest of this entry »
Posted by Richard
Posted by Richard 


