ǹ - Ǽ
ƹ ־ ̸ üȭ Ǽ迡 ǹ̰ ݰ ۿ . ö Ż ȭ ϴ. Ż öڰ ϴ Ĵٺٰ 칰 ٴ ̴. ܼ öڵ鿡Ը ִ ̾߱ ƴ .
ȣ Źͽ , ʿ 6 鿡 ؼ ϰ Ͽٸ ̰ üȭ ȭ(in place) Ͽ Ѵ. Ǽ迡 ̷ ̷ ̴.
ȣ Źͽ ӿũ - BMIS
ȣ Źͽ üȭϴ а How to ϰ ִ BMIS̴. Business Model for Information Security, ȣ Ͻ ̴. ڰ Ư ڵ鿡 Ұϴ ̸ ֵ Ͻ ̶ ̴. ȣ 캸ҵ ϴ ȣ ν Ͻ ȸ ̿ Ͻ ּȭؾ DZ ̴.BMIS ISACA(Information Systems Audit and Control Association; ý ȸ) ο . ISACA IT Źͽ (Serving IT Governance Professionals) ý ŷڿ ġ(Trust in, Value from, Information Systems) ijġ ִ.
ȸ ̸ ֵ ý , IT (Audit) IT (Control), IT Źͽ й ȸ̴(ѹα 翬 ԵǾ ְ ѱ é͵ ִ. www.isaca.or.kr).
⸦ Ѱ ̷ ٷ ISACA ȸ ȣ Źͽ (Information Security Governance) ٷ ǰ BMIS ӿũ ϴ 翬ϴٰ ִ.
BMIS
BMIS ?
ȣ Źͽ Ͻ ̴ϱ ȣ Źͽ ӿũ 翬 Ͻ ̶ ߾ξ ̴. Ƿ BMIS ȣ Ͻ ٹ(Business Oriented Approach) źϰ ȴ. ȿ ý (Systems Thinking) Ѵ. ϰ ִ 4 (Elements) 6 (Dynamic Interconnections) ȣ Źͽ ڿ, μ, ȭ ϴ ü Ѵ. ٸ ӿũ ȣ Ͽ ó Ÿ. Ư COBIT(Control OBjectives for Information and Related Technology)ӿũʹ IT Źͽ ִ.
BMIS 4
BMIS ȣ Źͽ ӿũ̴.
Ͻ ٹ ̴.
ý ̴.
4 ҿ 6 ڷ ȴ.
COBIT ó .
BMIS 6
BMIS COBIT ó
BMIS Ͽ ȣ Źͽ , Ű ȴ. Ͻ ý ⸦ ٶ. Į ؼ ȣ θ () ߿ ø ȸ DZ⸦ ٶ.
[ _ ITŹͽ// ߾̿ ̻(josephc@chol.com)]